last executing test programs: 4.610064027s ago: executing program 1 (id=36): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 4.545734322s ago: executing program 1 (id=38): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f00007bb000/0x1000)=nil, 0x1000, 0x65) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 4.476318022s ago: executing program 1 (id=40): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0x592f760085c69dcf, [0x9, 0x4, 0xfff, 0x736, 0x0, 0x0, 0x9, 0xfffffff9, 0xbaa, 0x2, 0x0, 0x3f, 0x6, 0x7, 0x7, 0x194, 0x2, 0x6, 0x6, 0x6, 0x3, 0xfffffff8, 0xfffffff7, 0x1, 0x5, 0x5, 0x6, 0x7, 0xd, 0x22, 0x1, 0x9, 0x2, 0x5, 0x3, 0x1, 0x80, 0x5, 0x8, 0x7, 0x2, 0x0, 0x4, 0x6, 0x3b, 0x0, 0x248, 0x54ed, 0x6, 0xf, 0xffffff85, 0x6, 0x6, 0x4, 0x40, 0x6, 0x4, 0xa, 0x7, 0xc, 0x2, 0x2, 0xf5a, 0x401, 0x9, 0x6, 0x9, 0x3, 0x1, 0x5, 0xba, 0x0, 0x8, 0x9, 0xe, 0x1, 0x9, 0x9, 0xc, 0x1, 0x0, 0xfffff000, 0x8, 0x2, 0x8, 0x1ff, 0xebec, 0x101, 0x5c, 0xc, 0x400, 0xffff0000, 0x4, 0x8d47, 0xc57, 0x4, 0x3ff, 0x80, 0x5, 0x6, 0x8, 0x81, 0x80000000, 0x9, 0x401, 0x2, 0x0, 0x401, 0x80000001, 0x8, 0x3, 0x1ff, 0x72000, 0x9c, 0x7f, 0x2a28, 0xfa6, 0x1, 0x8c, 0x5bf, 0x8, 0x1, 0x101, 0x0, 0xeb, 0x8, 0x7fffffff, 0xe356], "dd8ba4b811f07ab83c24d324406d40fc8f7f5540e8e46863a1a9da4f791dc1c75bd742ff100658279424c045685f971b07695bbd08b1170b3c258e5c3c2fbe02d05a41947c2c2c"}}) pread64(r0, &(0x7f0000002c00)=""/4082, 0xff2, 0x7fffffff) 4.418618807s ago: executing program 1 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 4.413777518s ago: executing program 1 (id=44): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xd5, "a5d44b3bdefdb118545f1e2c02be35b5f0773db12691db7d1c8fcd6873a7af7080a1376eebaeeecfe4837fd6edc5568c0a877223794a867b3d05eb64055ffebd562a7fbe7c8b2c74866c8d928e5ad1621719b3535af32f36df746c873ef03dd670286a55584317fd66e564e950fa0ab7f23fbce35a58018b1c4b461f902479d052492fe58ea43243fa2bb3f56ca68bd7fac6be2f4223e091bec2d50b19a5c5e01e302e96f8b855c1de668a131537e79827afb6aefdb33b5a51ac8b17703124909ee29dbabb169bc4ef64a77588beb6331b35b5e956"}, &(0x7f00000003c0)=0xdd) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r5, 0x5}, 0x8) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '.\x02\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r8, 0x6a98047402e98331, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r12 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r12, 0xc05c6104, &(0x7f0000000080)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", "0500", ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "00000000d220b34b00", "081c18016476d41a3000"]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x206200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}}, 0x440b0) 1.817594095s ago: executing program 1 (id=46): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x5, 0x8c, &(0x7f0000000500)=ANY=[@ANYBLOB="120140030000000899040a505a000102030109027a0003010250010904000000010100000a2401209f0a000201020904010000010200000904010101010200000a240202000009000312072401ef08030009050109200006067f0725010005ff0f09040200000102000009040201010102000009240201fd080603fa09058209200063040707250104010900"], &(0x7f0000000800)={0xffffffd0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, &(0x7f00000002c0)=@lang_id={0x0, 0x3, 0x280a}}]}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 1.639394202s ago: executing program 2 (id=54): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="6878f0e055a3f3052ba8744fec0f4894739373fb2b793dda21f7d7a961a4b48528a8adaa79980d034fe7b1ecc87536ff35a87cdf386addcc8be85672a90450012edeada3971dc891e8f36b6be0fc2825d51b209e201cac171117", 0x5a, 0x0, &(0x7f0000000180)={0x2, 0x161, {0x0, 0xc, 0xe6, "c1d050dd951751f568f7f3473ad21a841a5d19a836ce2d3442095b15e7a3cad4d7bf270773940448355478c4911b1f7822846bd5c054581cdc54e1d66aec26a4b902ca952e2589c98415b74ed611e9729856dbb0ce3d1b9b90ce8aff4f42407a202db1740e385efb201100abdf416b64acab5f02bc2c25b5f4b3a5141b7d159cee03aa08247b55f7dd2e60ac702b9fb16a5332e5ce2248b24812b3aa244b60d531583ef9b4720500c24bc8667969876cbc90f2a0faae2169b11a8c2d89db5cce4998194f0abee14b0d70c2e95b1ee27f7dae4b254022b07235c574d7c5d2a732236cd0166436", 0x6e, "8ae0f60ed99c9af02473a942986b467678d276291541cc3e07819c7f6b1eb36aa59207ff24abe1abe60f5e2d123d26d1eee21423c24e986c829354467b26bab95a0fccff3f80e7937bb5c9ecfd2907328ad7b52ab9e051f0f301258aa72b1974930c22aa49614a5044b45ecb3085"}, 0xd3, "8be2952fd49fb17dd5f5b3c852057b6318ba3bdb32441d2413f026bbb17c1d1a623b98f68cfd413de0fbc68cf70c7beb490bcb9ab83468a60a7314d5162d9d952994f743abf35ac83a78449714c7706a9d0241ca7aad01a7c07d95e47dc7e1e171853f1defd4bb4f53648a11bdfacda9546a4cecc81f724c1cd824e3428cda4c96274a4d0e83a02492fa71a8618ad539e7322e80b47fa9bd381aeddfe56006e6534b677042910413e104c84c369d97efeac8be8671aab560b203ad15bc453faa414ff3abb3a9d489599189f73b168c0e83daaa"}, 0x240}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000480)={0xb, 0x6, 0x7, 0x16, 0x7, 0xe4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000004c0)={0x2, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000500)={r2, 0x886}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={@loopback, 0x1, 0x0, 0x80, 0x0, [{}, {@initdev}, {@empty}, {@multicast1}, {@multicast1}, {@broadcast}, {@private}, {@multicast1}]}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xe0, 0x100000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000680)={r3, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000006c0)={0x0, 0x3, 0x7, 0x8000, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000700)='\x00', 0x0, r4) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x7}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000007c0)={r5, 0x7, 0x30}, 0xc) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000900)={r3, 0x5, &(0x7f0000000800)=[0x1, 0x4, 0x10, 0x2, 0x1], &(0x7f0000000840)=[0x359f, 0x5, 0x9, 0x7, 0x8000, 0x4], 0x10, 0xa, 0x4, &(0x7f0000000880)=[0x5, 0x0, 0x1, 0x0, 0x9, 0x2, 0x0, 0xed, 0xff, 0x0], &(0x7f00000008c0)=[0x8, 0x0, 0x5, 0x5, 0x99dd]}) ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000940)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xe6, 0x2, 0x2, @loopback, @remote, 0x80, 0x20, 0xf349, 0x1}}) getsockname$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b00)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x2, 0xc, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x68, 0x0, 0x2, 0x2d, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0xd, [{@multicast2, 0x9}]}, @rr={0x7, 0x7, 0x93, [@multicast1]}, @lsrr={0x83, 0x17, 0x89, [@remote, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @loopback, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x130, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008440) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000e40), 0x10) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000f00)=[@text32={0x20, &(0x7f0000000e80)="3e260f232466baf80cb83e215d8bef66bafc0c66b8000066ef3e0faeb193c600000f20c035000000800f22c00f017927650fc72ce40f71d60c0f01df67660fc7359a0000c0fe8300", 0x48}], 0x1, 0x20, &(0x7f0000000f40), 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000fc0)={{0x2, 0x4e20, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5e, {0x2, 0x4e24, @private=0xa010100}, 'veth0_to_hsr\x00'}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001040), &(0x7f0000001080)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x10) 1.636525996s ago: executing program 2 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010003001000fbffff7f00000400000000000c00020001000000150000000c000c80080002000900000004000400cecb20033ba0700487f6e1094c43ac11e6b87a3980c548f6790aa412372a8fdc708e95780db5bbef2ede61bb364b55e818d190da66ae3a763537fc8e7a27ff92dc2ba650391818f0750c6b0a37e83b998ce43a4d7ea18b7eed1f24af17e3bad85a496c552c"], 0x34}, 0x1, 0x0, 0x0, 0x400401a}, 0x24008034) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfd14) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x20000, 0x48) ppoll(&(0x7f00000004c0)=[{r6, 0x6049}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x4084) 1.539925417s ago: executing program 3 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffc00}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x84, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB], 0x18}, 0x41) recvmsg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20) r6 = dup(r3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$inet6_tcp(0xa, 0x1, 0x0) 1.149488696s ago: executing program 0 (id=65): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = userfaultfd(0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045f40028000040000806907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c08000090780000857deae4f38a512d989b5ec2960e6571d3988c02aadca0090352a9ad4d5b91683ac8d271a866c88f2da2963fe0ba08804dea5d312a38cd804b5f2815345d5a25b7f6d44d1bbb3f1edac93f7be4ada7474b2e006e7a08f71e75b6a34e12de7040666927789c57516ffe91ab90d3643be532bd9b496948e0f3dfb5e9e750c61c0d91112b2e758b045d5a2417946ec10a1ffbd4b9993f720438a8d3430621629e62bd2c87f058341de24ae86f0c"], 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) listen(r2, 0x4000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000180)={0x38, "7daec5d4be3feedaa53280130e000efecd2355968b6e2d98d47163b05e56eceaf96dda0927582a6e04772dd451bdbb42c24ea17ef9479a72149fd28a02c4fc4eeb29041bc7cac106517eb8cf918d10d23b51782d8dcc03cd136d6419430377cc12b4be08e499145a35fce58152bb8808b5e0d9a02f58ab31c7065cfd5d3e0762"}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 1.009744294s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10044045}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x8, 0x5, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x65, 0x0, 0xfa, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@lsrr={0x83, 0x13, 0x16, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x25, 0x3, [{0x2, 0xa, "ec6ab022c8d210bf"}, {0x0, 0x8, "5f3dd5d0cace"}, {0x0, 0xd, "6f5a8772dd45e85fa52041"}]}, @timestamp={0x44, 0xc, 0xcd, 0x0, 0x4, [0x5, 0x3]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x7, 0x6, 0x7ff, {{0x12, 0x4, 0x2, 0x0, 0x48, 0x68, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x2, 0x0, 0x6, [0x200, 0xb336, 0x7fffffff, 0x7, 0x6]}, @timestamp_prespec={0x44, 0x1c, 0x66, 0x3, 0x7, [{@rand_addr=0x64010100, 0x4}, {@empty, 0x6}, {@remote, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1bc, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000800}, 0x40010) 939.044646ms ago: executing program 0 (id=67): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x43d3, 0x40, 0x0, 0x235}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendto$phonet(r0, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 818.861752ms ago: executing program 0 (id=68): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r3, 0x7b3, &(0x7f00000035c0)) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 708.449795ms ago: executing program 2 (id=69): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x50, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8e341d, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000001680)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m3\xfd\xb8?ObS\x8e\x8dm\xa0}@?\xa2\xaf.R\xc6\xb1\xe0__\x1d\xd6\xcf\x91\xcf\x80n\xa1\xc4\xd7\xaf\x9f\xefJ@\xdfO\xa1\xc7$\xb1\xf5V?\x9buj.=|\xb3^\xc5o\xd4JT\x91<1F\xdbk\xec\xcc\xb2\xcfB\x7f\xde|\xa7W1<\a\n\xce\x82.]\xc5fF\xd0dO\xae\xf9Gi']}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x16132, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/173, 0xad, 0x1, &(0x7f00000007c0)=""/135, 0x87}, &(0x7f0000000900)=0x40) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)='fd', 0x0, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x2000000000000310, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f0000000340)=""/198, 0x41000, 0x0, '\x00', r4, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) write$P9_RLERRORu(r1, 0x0, 0x0) 619.018562ms ago: executing program 2 (id=70): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 617.895659ms ago: executing program 3 (id=71): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt(r0, 0x3, 0x0, &(0x7f0000000300)=""/123, &(0x7f00000003c0)=0x7b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000002c0)={0x5, 0xff}) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000002c0)={0x5, 0xff}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000280)) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x39}]}, 0x60}}, 0x800) 615.153079ms ago: executing program 0 (id=72): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r1, r2, r3, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200c01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x4e, 0xfc, 0xd, 0x0, 0x3, 0x81, 0xd, 0xe5, 0x0, 0x40, 0x13, 0x8, 0x0, 0x3169, 0x3d13, 0x81, 0x5, 0xc4, 0xae, '\x00', 0xd, 0xc3db}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x13) 549.3593ms ago: executing program 2 (id=73): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x700, 0x3, 0x7e6, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @empty}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bond={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xfffffffe}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 549.135566ms ago: executing program 0 (id=74): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x42d, 0x0, 0x10000000000f48, 0x8, 0x25}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f00000002c0)="28d36689") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000040000100feffffffffdbdf25017c0000040042800900018006000600800a00000c0002800800178004000100"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r6, 0x5}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) sendmsg$inet_sctp(r3, &(0x7f0000002840)={&(0x7f0000000140)=@in6={0xa, 0x4e24, 0xfffffffb, @private1, 0x1}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000200)="7b77e3d74ffb9998143c4cff27a287a65e95042800a5144e3be19a05ba28eaa6b5376c5d6cb5d44578274823d952eecc752a1369642e14656acad85a3a53b4ee3c806cd8bcfeb75c022c7365b039f5b7c2efcbc97e609d630f1fa34288bddce2d7331b0f6c31549a43510e2ec3879d47206734685d8d9cc16045eee0da60c1da6998e7df517d090343ef78d55fc7913701065b5152cfbeadaecdb22f63493e7cb05820592e1cde6ade8ec3e70f701b7a6d4cb2122e9675f713e8d957c407580cc675cf0ba3c07ef8fd3b81d26a7d98bab168c67cfb690bcd5799d7bfd3fb45f440", 0xe1}, {&(0x7f0000000440)="0f1ec7716bf92ea6c13f1a84a0736d139894a893a62bca6a742f8f3d95bbcff17ab04066857c1f89430c55bf3731e7ccdb3cc547c3f644fe56fdd62abf7c0b1f35eb2d09d0b5bf2d9a005825a2126695cf71a204ebf08073989692d5788a913afed2a4262fcba8c265f3a200eaa864b5732e80aedb77c5210e7bff42ebbb83792aa3a850cf826fe9e9139486765e8d8aa2c64958701b9b75e8f0885fad82733a5da204cd1cb408e14206c90f488d50786a5f309191b8ef54f3509ace4c47afdc0d6a3f0b34146316253f1fe26205318a39f44368371cc5c2a83ea731b59e1b3ef49dc779dbe6de3f4279a00307", 0xed}, {&(0x7f0000000540)="9d7e7036deb6d86c4ddb5be888f4d34598b27539e4965d923be6107c08f9da4003e87ec79739f3bed356870fc547acfd1a50a76de9676f6c0ddcd011e0f3f0b86ec7f894b83a898cf7d9a35f9093fa22907613ec6505aa84471d107b0227f71bcaab9f82ae39305913c6eb1cbddefab46a66805348708ff062", 0x79}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="32e89b5ded64f7ca5195e268ed87edaa27d132b67a46813e5814ce40fdc585f634b1cbc8790510a413668e1b590f9bad83b0127b34317e5cba142bcc76106f11afd76ed590216c4b5e03323a22f623101c93af50f457f6a2fdf8e1d2c564c2aa21681ff7a7bebbc3a30698a7437d0636065c79d6650c9ede3e3291471ed4eeae4ffeb7b519f7d30f375117dbf371912f942dab9b87e77245c00918530ea52935f8dc3b3ca4a738f1aff70daaed2150cf1f051a36726235d1bfe8dbd5e1fe36f153f8c4", 0xc3}], 0x5, &(0x7f0000002740)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xff}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8, 0xfffffe05, 0x33, r6}}, @init={0x18, 0x84, 0x0, {0x8, 0x0, 0xf, 0xe0c5}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, @authinfo={0x18, 0x84, 0x6, {0x34e}}, @init={0x18, 0x84, 0x0, {0x2, 0x9, 0x3, 0xd851}}, @authinfo={0x18, 0x84, 0x6, {0xfc00}}], 0xd0, 0x8080}, 0x800) 548.235236ms ago: executing program 3 (id=75): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x69100f4f, 0xd, 0xe000, 0x13, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket(0x23, 0x80805, 0x0) accept(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="0f381dbf8800f30f0926f76300d9a50000b8b1008ec00f01190f20c06635080000000f22c0ba4000b00eee3ef30fc7b200106766c7442400959c00006766c7442402008000006766c744240600000000670f011c24", 0x55}], 0x1, 0x4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="66b9800000c00f326635003800000f3066b9f50200000f32b090ee0f01ca0f3802b40000f30f09dbcd0f320f23c80f21f866350000d0000f23f866b9c70d00000f320fc729"}], 0x1, 0x27, 0x0, 0x5f) ioctl$KVM_RUN(r4, 0xae80, 0x0) 499.75382ms ago: executing program 2 (id=76): syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0), &(0x7f0000000080)=[0x7, 0xceea, 0x7fff, 0x7, 0xf], 0xfffffffffffffd91}) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="1c0000001a005f0014f9f40700090400810080ff0001400000000000", 0x1c) setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f00000000c0)=0x7, 0x4) r7 = syz_open_dev$video(&(0x7f0000000100), 0x7347, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_SETQUOTA(r7, 0x0, r8, &(0x7f00000002c0)={0x8, 0x5, 0x9, 0x23ca5ce1, 0x9, 0x5, 0xd5c16a0, 0x80, 0x3}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) 319.795068ms ago: executing program 3 (id=77): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r14, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r14, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc0}, {0x6}, {0x8, 0x15, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0xffffffff}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000810}, 0x40008a5) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}}, 0x8000) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x4044000, &(0x7f0000000040)={0xa, 0x4e22, 0xffff, @private1, 0x7}, 0x1c) 149.229136ms ago: executing program 3 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_delete(r4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r7}, 0x94) 0s ago: executing program 3 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000004c0), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40}, [@NDA_DST_MAC={0xa, 0x1, @random='\b\x00'}]}, 0x28}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000500)=""/239) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) kernel console output (not intermixed with test programs): [ 53.127353][ T40] audit: type=1400 audit(1777423135.069:61): avc: denied { siginh } for pid=5696 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.822894][ T34] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:10750' (ED25519) to the list of known hosts. [ 420.132158][ T40] audit: type=1400 audit(1777423502.099:62): avc: denied { name_bind } for pid=5777 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 420.170600][ T40] audit: type=1400 audit(1777423502.129:63): avc: denied { execute } for pid=5778 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 420.179469][ T40] audit: type=1400 audit(1777423502.139:64): avc: denied { execute_no_trans } for pid=5778 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 422.345177][ T40] audit: type=1400 audit(1777423504.309:65): avc: denied { mounton } for pid=5778 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 422.353327][ T40] audit: type=1400 audit(1777423504.319:66): avc: denied { mount } for pid=5778 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 422.355005][ T5778] cgroup: Unknown subsys name 'net' [ 422.364257][ T40] audit: type=1400 audit(1777423504.329:67): avc: denied { unmount } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 422.503667][ T5778] cgroup: Unknown subsys name 'cpuset' [ 422.507865][ T5778] cgroup: Unknown subsys name 'rlimit' [ 422.655561][ T40] audit: type=1400 audit(1777423504.619:68): avc: denied { setattr } for pid=5778 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.664368][ T40] audit: type=1400 audit(1777423504.619:69): avc: denied { create } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.670741][ T40] audit: type=1400 audit(1777423504.619:70): avc: denied { write } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.678315][ T40] audit: type=1400 audit(1777423504.619:71): avc: denied { read } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.706110][ T5788] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 423.543731][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 427.092268][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 427.092279][ T40] audit: type=1400 audit(1777423509.059:82): avc: denied { execmem } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 427.222851][ T40] audit: type=1400 audit(1777423509.189:83): avc: denied { create } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 427.233354][ T40] audit: type=1400 audit(1777423509.189:84): avc: denied { read write } for pid=5796 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 427.241011][ T40] audit: type=1400 audit(1777423509.189:85): avc: denied { open } for pid=5796 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 427.248414][ T40] audit: type=1400 audit(1777423509.199:86): avc: denied { ioctl } for pid=5796 comm="syz-executor" path="socket:[6762]" dev="sockfs" ino=6762 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 427.263366][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.265863][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.271181][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.274169][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.276959][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.280605][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.284069][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.286873][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.287909][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.288149][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.288683][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.289746][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.289975][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.292054][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.292388][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.293052][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.293291][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.293555][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.293869][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.306353][ T40] audit: type=1400 audit(1777423509.269:87): avc: denied { read } for pid=5796 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 427.309284][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.312856][ T40] audit: type=1400 audit(1777423509.269:88): avc: denied { open } for pid=5798 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 427.312881][ T40] audit: type=1400 audit(1777423509.269:89): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 427.312900][ T40] audit: type=1400 audit(1777423509.269:90): avc: denied { module_request } for pid=5798 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 427.312919][ T40] audit: type=1400 audit(1777423509.269:91): avc: denied { module_request } for pid=5806 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 427.899592][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.902587][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.905599][ T5804] bridge_slave_0: entered allmulticast mode [ 427.909760][ T5804] bridge_slave_0: entered promiscuous mode [ 427.916538][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.919658][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.922776][ T5804] bridge_slave_1: entered allmulticast mode [ 427.926554][ T5804] bridge_slave_1: entered promiscuous mode [ 427.973418][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.976713][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.980016][ T5796] bridge_slave_0: entered allmulticast mode [ 427.983559][ T5796] bridge_slave_0: entered promiscuous mode [ 427.992463][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.995560][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.998637][ T5806] bridge_slave_0: entered allmulticast mode [ 428.003515][ T5806] bridge_slave_0: entered promiscuous mode [ 428.015229][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.018095][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.020616][ T5796] bridge_slave_1: entered allmulticast mode [ 428.023374][ T5796] bridge_slave_1: entered promiscuous mode [ 428.033880][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.037187][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.040316][ T5806] bridge_slave_1: entered allmulticast mode [ 428.044345][ T5806] bridge_slave_1: entered promiscuous mode [ 428.049811][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.054591][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.117530][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.133439][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.138633][ T5804] team0: Port device team_slave_0 added [ 428.142138][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.159341][ T5804] team0: Port device team_slave_1 added [ 428.163509][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.166628][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.169041][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.171697][ T5798] bridge_slave_0: entered allmulticast mode [ 428.174532][ T5798] bridge_slave_0: entered promiscuous mode [ 428.177656][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.179996][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.182794][ T5798] bridge_slave_1: entered allmulticast mode [ 428.185791][ T5798] bridge_slave_1: entered promiscuous mode [ 428.208074][ T5796] team0: Port device team_slave_0 added [ 428.216642][ T5796] team0: Port device team_slave_1 added [ 428.246269][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.248495][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.256631][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.270184][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.276710][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.281099][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.283443][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.292397][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.297770][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.300261][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.310751][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.316056][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.318639][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.327004][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.332866][ T5806] team0: Port device team_slave_0 added [ 428.365667][ T5806] team0: Port device team_slave_1 added [ 428.375910][ T5798] team0: Port device team_slave_0 added [ 428.379824][ T5798] team0: Port device team_slave_1 added [ 428.395789][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.398085][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.407545][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.412076][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.414487][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.424553][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.466837][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.469775][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.480539][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.486821][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.489405][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.499647][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.509232][ T5804] hsr_slave_0: entered promiscuous mode [ 428.512620][ T5804] hsr_slave_1: entered promiscuous mode [ 428.518845][ T5796] hsr_slave_0: entered promiscuous mode [ 428.522544][ T5796] hsr_slave_1: entered promiscuous mode [ 428.526169][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 428.528616][ T5796] Cannot create hsr debugfs directory [ 428.555690][ T5806] hsr_slave_0: entered promiscuous mode [ 428.557930][ T5806] hsr_slave_1: entered promiscuous mode [ 428.560086][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 428.562170][ T5806] Cannot create hsr debugfs directory [ 428.633708][ T5798] hsr_slave_0: entered promiscuous mode [ 428.636004][ T5798] hsr_slave_1: entered promiscuous mode [ 428.638049][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 428.639850][ T5798] Cannot create hsr debugfs directory [ 428.963329][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.974543][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.980319][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.985181][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.988133][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.994944][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.005514][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.009330][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.048894][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.054911][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.058294][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.062463][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.065223][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.068952][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.071866][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.075683][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.130962][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.137242][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.141438][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.145898][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.150369][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.155455][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.158162][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.163953][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.224217][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.233737][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.237734][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.245726][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.251807][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.256325][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.263054][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.266866][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.274427][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.302787][ T5811] Bluetooth: hci1: command tx timeout [ 429.304213][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.333173][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.335774][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.345235][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.348379][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.376699][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.391432][ T5811] Bluetooth: hci2: command tx timeout [ 429.391443][ T5803] Bluetooth: hci3: command tx timeout [ 429.391453][ T5808] Bluetooth: hci0: command tx timeout [ 429.410382][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.425161][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.442431][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.445653][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.457091][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.460307][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.484767][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.495245][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.507199][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.510180][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.528291][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.534869][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.538058][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.562133][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.565301][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.590969][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.593828][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.635331][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.781192][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.811412][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.815717][ T5806] veth0_vlan: entered promiscuous mode [ 429.825857][ T5806] veth1_vlan: entered promiscuous mode [ 429.858167][ T5804] veth0_vlan: entered promiscuous mode [ 429.863865][ T5806] veth0_macvtap: entered promiscuous mode [ 429.873123][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.877187][ T5804] veth1_vlan: entered promiscuous mode [ 429.879918][ T5806] veth1_macvtap: entered promiscuous mode [ 429.888370][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.903528][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.917084][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.925376][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.933919][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.937084][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.945312][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.979137][ T5804] veth0_macvtap: entered promiscuous mode [ 429.985277][ T5796] veth0_vlan: entered promiscuous mode [ 429.987694][ T5798] veth0_vlan: entered promiscuous mode [ 429.995992][ T5796] veth1_vlan: entered promiscuous mode [ 429.998937][ T5804] veth1_macvtap: entered promiscuous mode [ 430.024169][ T5798] veth1_vlan: entered promiscuous mode [ 430.035926][ T5815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.039073][ T5815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.054560][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.075312][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.085271][ T163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.085891][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.090965][ T5798] veth0_macvtap: entered promiscuous mode [ 430.093038][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.101766][ T163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.105902][ T163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.110032][ T5796] veth0_macvtap: entered promiscuous mode [ 430.114772][ T5798] veth1_macvtap: entered promiscuous mode [ 430.122043][ T163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.126697][ T5796] veth1_macvtap: entered promiscuous mode [ 430.174720][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.175011][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 430.180047][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.201640][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.225282][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.233091][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.242618][ T509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.246805][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.246976][ T509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.250586][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.267537][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.271524][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.289860][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.293793][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.302779][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.306093][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.312758][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.476864][ T5959] /dev/sg0: Can't lookup blockdev [ 431.381690][ T5808] Bluetooth: hci1: command tx timeout [ 431.461207][ T5808] Bluetooth: hci0: command tx timeout [ 431.461241][ T5811] Bluetooth: hci3: command tx timeout [ 431.461584][ T5803] Bluetooth: hci2: command tx timeout [ 433.266710][ T5952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.295699][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.298659][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.315471][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 433.315485][ T40] audit: type=1400 audit(1777423515.279:127): avc: denied { create } for pid=5966 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.334096][ T40] audit: type=1400 audit(1777423515.279:128): avc: denied { create } for pid=5966 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.334436][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.345843][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.348646][ T40] audit: type=1400 audit(1777423515.309:129): avc: denied { append } for pid=5971 comm="syz.0.7" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.351693][ T40] audit: type=1400 audit(1777423515.309:130): avc: denied { create } for pid=5971 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.364465][ T40] audit: type=1400 audit(1777423515.309:131): avc: denied { accept } for pid=5971 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.372561][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.372573][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.372966][ T40] audit: type=1400 audit(1777423515.309:132): avc: denied { getopt } for pid=5971 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.392197][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.395298][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.447890][ T5811] block nbd0: Receive control failed (result -32) [ 433.453900][ T5972] block nbd0: shutting down sockets [ 433.461673][ T5811] Bluetooth: hci1: command tx timeout [ 433.523034][ T40] audit: type=1400 audit(1777423515.489:133): avc: denied { ioctl } for pid=5974 comm="syz.2.3" path="socket:[11284]" dev="sockfs" ino=11284 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.537298][ T40] audit: type=1400 audit(1777423515.499:134): avc: denied { create } for pid=5977 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 433.540732][ T5811] Bluetooth: hci0: command tx timeout [ 433.541063][ T5808] Bluetooth: hci3: command tx timeout [ 433.551050][ T5811] Bluetooth: hci2: command tx timeout [ 433.563950][ T40] audit: type=1400 audit(1777423515.529:135): avc: denied { create } for pid=5975 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.577590][ T40] audit: type=1400 audit(1777423515.539:136): avc: denied { write } for pid=5975 comm="syz.1.2" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.581731][ T5982] QAT: failed to copy from user cfg_data. [ 433.590173][ T5983] QAT: failed to copy from user cfg_data. [ 433.703908][ T5991] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 433.729260][ T5993] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15'. [ 433.738646][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 433.950203][ T6018] Cannot find set identified by id 0 to match [ 433.953169][ T5811] Bluetooth: Unexpected continuation frame (len 16) [ 434.042648][ T6022] QAT: failed to copy from user cfg_data. [ 434.110733][ T5891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 434.174484][ T6025] netlink: 'syz.2.24': attribute type 4 has an invalid length. [ 434.209576][ T6034] omfs: Invalid superblock (0) [ 434.251118][ T6041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.279177][ T6041] syzkaller0: entered promiscuous mode [ 434.281349][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 434.284002][ T6041] syzkaller0: entered allmulticast mode [ 434.286700][ T5891] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.289528][ T5891] usb 6-1: config 179 has no interface number 0 [ 434.291548][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.294948][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.298385][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.302521][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.306111][ T5891] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.310153][ T5891] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.313478][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.320699][ T6009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.342130][ T6043] capability: warning: `syz.0.30' uses deprecated v2 capabilities in a way that may be insecure [ 434.580975][ T5891] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 434.668505][ T6051] netlink: 'syz.0.33': attribute type 27 has an invalid length. [ 434.743029][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.746597][ T5906] usb 6-1: USB disconnect, device number 2 [ 434.750013][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 435.251127][ T6073] QAT: failed to copy from user cfg_data. [ 435.263461][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.267540][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.314746][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.319870][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.399812][ T6066] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 435.404896][ T6066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.410451][ T5815] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.414154][ T5815] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.420323][ T5815] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.423379][ T5815] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.452076][ T6092] binder: BINDER_SET_CONTEXT_MGR already set [ 435.454673][ T6092] binder: 6090:6092 ioctl 4018620d 200000004a80 returned -16 [ 435.502137][ T6097] Zero length message leads to an empty skb [ 435.551752][ T5811] Bluetooth: hci1: command tx timeout [ 435.621258][ T5811] Bluetooth: hci3: command tx timeout [ 435.621314][ T5803] Bluetooth: hci0: command tx timeout [ 435.621329][ T5808] Bluetooth: hci2: command tx timeout [ 437.998072][ T6056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.061081][ T6109] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 438.064623][ T6111] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 438.124824][ T6106] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 438.164481][ T6123] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 438.171067][ T6123] netlink: 'syz.2.52': attribute type 4 has an invalid length. [ 438.174295][ T6123] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.52'. [ 438.175458][ T6125] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.214035][ T6130] mmap: syz.2.54 (6130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 438.227124][ T6132] Bluetooth: MGMT ver 1.23 [ 438.277911][ T6138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.58'. [ 438.282071][ T5757] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 438.305262][ T6146] QAT: failed to copy from user cfg_data. [ 438.342439][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.352016][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.431101][ T5757] usb 6-1: Using ep0 maxpacket: 32 [ 438.435116][ T5757] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 438.436131][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 438.436144][ T40] audit: type=1400 audit(1777423520.399:217): avc: denied { unlink } for pid=6150 comm="syz.0.62" name="#1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 438.439808][ T5757] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 438.440905][ T40] audit: type=1400 audit(1777423520.399:218): avc: denied { mount } for pid=6150 comm="syz.0.62" name="/" dev="overlay" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 438.458866][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 438.461743][ T5757] usb 6-1: Product: syz [ 438.463269][ T5757] usb 6-1: Manufacturer: syz [ 438.464896][ T5757] usb 6-1: SerialNumber: syz [ 438.467980][ T5757] usb 6-1: config 0 descriptor?? [ 438.471840][ T6107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 438.476464][ T5757] hub 6-1:0.0: bad descriptor, ignoring hub [ 438.478953][ T5757] hub 6-1:0.0: probe with driver hub failed with error -5 [ 438.660119][ T40] audit: type=1400 audit(1777423520.619:219): avc: denied { ioctl } for pid=6157 comm="syz.0.64" path="socket:[10915]" dev="sockfs" ino=10915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 438.663355][ T6158] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 438.676259][ T40] audit: type=1400 audit(1777423520.639:220): avc: denied { write } for pid=6157 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 438.710264][ T40] audit: type=1400 audit(1777423520.669:221): avc: denied { name_bind } for pid=6162 comm="syz.0.65" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 438.719079][ T40] audit: type=1400 audit(1777423520.679:222): avc: denied { node_bind } for pid=6162 comm="syz.0.65" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 438.728701][ T40] audit: type=1400 audit(1777423520.679:223): avc: denied { ioctl } for pid=6162 comm="syz.0.65" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11538 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 438.754823][ T6163] overlayfs: missing 'lowerdir' [ 438.855690][ T40] audit: type=1400 audit(1777423520.819:224): avc: denied { sys_module } for pid=6165 comm="syz.0.66" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 438.909436][ T40] audit: type=1400 audit(1777423520.869:225): avc: denied { create } for pid=6171 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.917746][ T40] audit: type=1400 audit(1777423520.879:226): avc: denied { getopt } for pid=6171 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.071533][ T6107] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 439.144204][ T6181] process 'syz.2.69' launched './file0' with NULL argv: empty string added [ 439.227996][ T6185] QAT: failed to copy from user cfg_data. [ 439.229234][ T6107] usb 6-1: device firmware changed [ 439.233751][ T5891] usb 6-1: USB disconnect, device number 3 [ 439.323393][ T6194] bond1: Removing last arp target with arp_interval on [ 439.371825][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 439.520775][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 439.525043][ T5891] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 439.531766][ T5891] usb 6-1: string descriptor 0 read error: -22 [ 439.535622][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 439.535625][ T5891] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.542904][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.543758][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 439.548171][ T5891] usb 6-1: config 0 descriptor?? [ 439.552375][ T6164] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.555378][ T5891] hub 6-1:0.0: bad descriptor, ignoring hub [ 439.557498][ T5891] hub 6-1:0.0: probe with driver hub failed with error -5 [ 439.590703][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 439.597885][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 439.640745][ T5765] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 439.740806][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 439.745102][ T39] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 439.748401][ T39] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 439.752558][ T39] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 439.756429][ T39] usb 7-1: config 250 has no interface number 0 [ 439.759013][ T39] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 439.764632][ T39] usb 7-1: config 250 interface 228 has no altsetting 0 [ 439.768200][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 439.771290][ T39] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 439.773904][ T39] usb 7-1: Product: syz [ 439.775309][ T39] usb 7-1: SerialNumber: syz [ 439.782141][ T39] hub 7-1:250.228: bad descriptor, ignoring hub [ 439.784267][ T39] hub 7-1:250.228: probe with driver hub failed with error -5 [ 439.826335][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.830578][ T5765] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.834441][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.844992][ T5765] usb 5-1: config 0 descriptor?? [ 439.872112][ T5757] usb 6-1: USB disconnect, device number 4 [ 439.986516][ T39] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 440.058234][ T5765] usbhid 5-1:0.0: can't add hid device: -71 [ 440.060167][ T5765] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 440.063756][ T5765] usb 5-1: USB disconnect, device number 2 [ 440.242632][ T6212] ------------[ cut here ]------------ [ 440.244552][ T6212] 1 [ 440.244560][ T6212] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#2: syz.2.76/6212 [ 440.248998][ T6212] Modules linked in: [ 440.250544][ T6212] CPU: 2 UID: 0 PID: 6212 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 440.253511][ T6212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.257309][ T6212] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.259688][ T6212] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 a5 3a 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 440.261174][ C0] usblp0: nonzero read bulk status received: -71 [ 440.265764][ T6212] RSP: 0018:ffffc9000632f760 EFLAGS: 00010246 [ 440.270305][ T6212] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 440.273032][ T6212] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 440.275734][ T6212] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 440.278550][ T6212] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 440.281478][ T6212] R13: 1ffff92000c65f3b R14: 0000000000000016 R15: 1ffff92000c65f05 [ 440.284394][ T6212] FS: 00007fe6a8ccc6c0(0000) GS:ffff8880d6579000(0000) knlGS:0000000000000000 [ 440.287530][ T6212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.289780][ T6212] CR2: 000000110c3f3d9a CR3: 000000005a2df000 CR4: 0000000000352ef0 [ 440.292252][ T6212] Call Trace: [ 440.293492][ T6212] [ 440.294577][ T6212] ? find_held_lock+0x2b/0x80 [ 440.296245][ T6212] ? is_bpf_text_address+0x8a/0x1a0 [ 440.298118][ T6212] ? is_bpf_text_address+0x8a/0x1a0 [ 440.300219][ T6212] ? bpf_ksym_find+0x128/0x1c0 [ 440.301365][ T5757] usb 7-1: USB disconnect, device number 2 [ 440.301898][ T6212] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.301917][ T6212] ? is_bpf_text_address+0x94/0x1a0 [ 440.307281][ T6212] ? kernel_text_address+0x8d/0x100 [ 440.308895][ T6212] ? __pfx_widen_string+0x10/0x10 [ 440.310626][ T6212] ? __kernel_text_address+0xd/0x30 [ 440.312317][ T6212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.314340][ T6212] ? arch_stack_walk+0xa6/0xf0 [ 440.315928][ T6212] ? stack_trace_save+0x8e/0xc0 [ 440.317465][ T6212] ? __pfx_stack_trace_save+0x10/0x10 [ 440.319180][ T6212] ? stack_depot_save_flags+0x27/0x9d0 [ 440.320980][ T6212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.322795][ T6212] ? policy_nodemask+0xed/0x4f0 [ 440.324316][ T6212] alloc_pages_mpol+0x1fb/0x540 [ 440.325855][ T6212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 440.327525][ T6212] ? drm_syncobj_array_find+0x34/0x3b0 [ 440.329220][ T6212] ___kmalloc_large_node+0xe5/0x120 [ 440.330942][ T6212] __kmalloc_large_node_noprof+0x1c/0x70 [ 440.332689][ T6212] __kmalloc_noprof+0x5be/0x850 [ 440.334217][ T6212] drm_syncobj_array_find+0x34/0x3b0 [ 440.335860][ T6212] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 440.337818][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.339928][ T6212] ? drm_dev_exit+0x41/0x60 [ 440.341398][ T6212] ? drm_dev_exit+0x41/0x60 [ 440.342819][ T6212] drm_ioctl_kernel+0x1f3/0x3e0 [ 440.344344][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.346435][ T6212] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 440.348110][ T6212] drm_ioctl+0x5e6/0xc60 [ 440.349743][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.352469][ T6212] ? __pfx_drm_ioctl+0x10/0x10 [ 440.354347][ T6212] ? selinux_file_ioctl+0x13b/0x290 [ 440.356208][ T6212] ? selinux_file_ioctl+0xb6/0x290 [ 440.357781][ T6212] ? __pfx_drm_ioctl+0x10/0x10 [ 440.359309][ T6212] __x64_sys_ioctl+0x18e/0x210 [ 440.361131][ T6212] do_syscall_64+0x10b/0xf80 [ 440.363001][ T6212] ? clear_bhb_loop+0x40/0x90 [ 440.364851][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.366673][ T6212] RIP: 0033:0x7fe6a7d9cdd9 [ 440.368103][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.373992][ T6212] RSP: 002b:00007fe6a8ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.376536][ T6212] RAX: ffffffffffffffda RBX: 00007fe6a8016090 RCX: 00007fe6a7d9cdd9 [ 440.379029][ T6212] RDX: 0000200000000340 RSI: 00000000c01864cd RDI: 0000000000000006 [ 440.381524][ T6212] RBP: 00007fe6a7e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 440.383993][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.386373][ T6212] R13: 00007fe6a8016128 R14: 00007fe6a8016090 R15: 00007ffcbc25f5e8 [ 440.388783][ T6212] [ 440.389765][ T6212] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 440.392107][ T6212] CPU: 2 UID: 0 PID: 6212 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 440.394860][ T6212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.397977][ T6212] Call Trace: [ 440.399044][ T6212] [ 440.399970][ T6212] dump_stack_lvl+0x100/0x190 [ 440.401419][ T6212] vpanic+0x552/0x970 [ 440.402669][ T6212] ? __pfx_vpanic+0x10/0x10 [ 440.404055][ T6212] panic+0xd1/0xe0 [ 440.405210][ T6212] ? __pfx_panic+0x10/0x10 [ 440.406685][ T6212] check_panic_on_warn.cold+0x19/0x34 [ 440.408682][ T6212] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.411109][ T6212] __warn.cold+0x191/0x328 [ 440.412509][ T6212] __report_bug+0x296/0x3d0 [ 440.414010][ T6212] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.416321][ T6212] ? __pfx___report_bug+0x10/0x10 [ 440.417855][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 440.419405][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 440.421305][ T6212] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.423243][ T6212] report_bug+0xb2/0x220 [ 440.424616][ T6212] ? __alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.426519][ T6212] handle_bug+0x16a/0x2a0 [ 440.427891][ T6212] exc_invalid_op+0x17/0x50 [ 440.429287][ T6212] asm_exc_invalid_op+0x1a/0x20 [ 440.430842][ T6212] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0 [ 440.433070][ T6212] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 a5 3a 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 440.438947][ T6212] RSP: 0018:ffffc9000632f760 EFLAGS: 00010246 [ 440.440897][ T6212] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 440.443302][ T6212] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 440.445713][ T6212] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 440.448382][ T6212] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 440.450790][ T6212] R13: 1ffff92000c65f3b R14: 0000000000000016 R15: 1ffff92000c65f05 [ 440.453273][ T6212] ? find_held_lock+0x2b/0x80 [ 440.454775][ T6212] ? is_bpf_text_address+0x8a/0x1a0 [ 440.456439][ T6212] ? is_bpf_text_address+0x8a/0x1a0 [ 440.458092][ T6212] ? bpf_ksym_find+0x128/0x1c0 [ 440.459637][ T6212] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.461929][ T6212] ? is_bpf_text_address+0x94/0x1a0 [ 440.464041][ T6212] ? kernel_text_address+0x8d/0x100 [ 440.466005][ T6212] ? __pfx_widen_string+0x10/0x10 [ 440.467814][ T6212] ? __kernel_text_address+0xd/0x30 [ 440.469454][ T6212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.471484][ T6212] ? arch_stack_walk+0xa6/0xf0 [ 440.473063][ T6212] ? stack_trace_save+0x8e/0xc0 [ 440.474582][ T6212] ? __pfx_stack_trace_save+0x10/0x10 [ 440.476279][ T6212] ? stack_depot_save_flags+0x27/0x9d0 [ 440.477963][ T6212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.479802][ T6212] ? policy_nodemask+0xed/0x4f0 [ 440.481738][ T6212] alloc_pages_mpol+0x1fb/0x540 [ 440.483657][ T6212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 440.485372][ T6212] ? drm_syncobj_array_find+0x34/0x3b0 [ 440.487599][ T6212] ___kmalloc_large_node+0xe5/0x120 [ 440.489623][ T6212] __kmalloc_large_node_noprof+0x1c/0x70 [ 440.491656][ T6212] __kmalloc_noprof+0x5be/0x850 [ 440.493152][ T6212] drm_syncobj_array_find+0x34/0x3b0 [ 440.494774][ T6212] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 440.496931][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.499307][ T6212] ? drm_dev_exit+0x41/0x60 [ 440.500902][ T6212] ? drm_dev_exit+0x41/0x60 [ 440.502673][ T6212] drm_ioctl_kernel+0x1f3/0x3e0 [ 440.504208][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.506246][ T6212] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 440.507885][ T6212] drm_ioctl+0x5e6/0xc60 [ 440.509222][ T6212] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 440.511289][ T6212] ? __pfx_drm_ioctl+0x10/0x10 [ 440.512842][ T6212] ? selinux_file_ioctl+0x13b/0x290 [ 440.514581][ T6212] ? selinux_file_ioctl+0xb6/0x290 [ 440.516154][ T6212] ? __pfx_drm_ioctl+0x10/0x10 [ 440.517617][ T6212] __x64_sys_ioctl+0x18e/0x210 [ 440.519160][ T6212] do_syscall_64+0x10b/0xf80 [ 440.520636][ T6212] ? clear_bhb_loop+0x40/0x90 [ 440.522115][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.524197][ T6212] RIP: 0033:0x7fe6a7d9cdd9 [ 440.525620][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.532133][ T6212] RSP: 002b:00007fe6a8ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.534814][ T6212] RAX: ffffffffffffffda RBX: 00007fe6a8016090 RCX: 00007fe6a7d9cdd9 [ 440.537204][ T6212] RDX: 0000200000000340 RSI: 00000000c01864cd RDI: 0000000000000006 [ 440.539631][ T6212] RBP: 00007fe6a7e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 440.542050][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.544468][ T6212] R13: 00007fe6a8016128 R14: 00007fe6a8016090 R15: 00007ffcbc25f5e8 [ 440.546910][ T6212] [ 440.548668][ T6212] Kernel Offset: disabled [ 440.550007][ T6212] Rebooting in 86400 seconds..