last executing test programs: 17.451714939s ago: executing program 0 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r5, 0x301, 0x0, 0x25dfdbfb, {0x1c}}, 0x14}}, 0x40006) 17.27060993s ago: executing program 1 (id=32): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x5, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 16.434352876s ago: executing program 0 (id=35): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @private}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x64000600) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x31364d59, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mbind(&(0x7f00002fb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8fff06004bcec88e97f951958971ffff1400a95107a561fb6bcda273135b6e13d0bb7bcd08ef1213043c1876b2f2d35f8c865d"], 0x14}}, 0x8010) chmod(&(0x7f00000001c0)='./file0\x00', 0xb) 14.791900617s ago: executing program 2 (id=36): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) process_vm_writev(r2, &(0x7f00000195c0)=[{&(0x7f0000019380)=""/178, 0xb2}, {&(0x7f0000019080)=""/9, 0x9}, {&(0x7f0000019440)=""/203, 0xcb}, {&(0x7f0000019540)=""/94, 0x5e}], 0x4, &(0x7f000001a7c0)=[{&(0x7f0000019600)=""/4096, 0x1000}, {&(0x7f000001a600)=""/181, 0xb5}, {&(0x7f000001a6c0)=""/64, 0x40}, {&(0x7f000001a700)=""/178, 0xb2}], 0x4, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x380, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c10000000000"], 0x74}}, 0x0) socket(0x2, 0x80805, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019340)={r3, 0xe0, &(0x7f0000019240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000190c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019100), 0x0, 0x40000088, &(0x7f0000019140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000019180), &(0x7f00000191c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000019200)}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r7, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r7, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 14.467899583s ago: executing program 4 (id=37): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1, 0xd}, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.356208335s ago: executing program 0 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) syz_80211_inject_frame(0x0, 0x0, 0x20) 11.755700357s ago: executing program 1 (id=41): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x200008, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002f00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x2, 0x40408d1) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x123000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000440)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000003c0)={0x6, 0xffe, 0x800}) dup(0xffffffffffffffff) 11.639194636s ago: executing program 2 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r4 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(r4, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) syz_80211_inject_frame(0x0, 0x0, 0x20) 10.486713837s ago: executing program 1 (id=43): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) eventfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x36) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}]}, 0x44}}, 0x80) close(r0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000100)=r9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 9.48053935s ago: executing program 0 (id=45): r0 = socket(0x15, 0x5, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbe) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f00000002c0)=0xc) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x14) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') 8.892544866s ago: executing program 4 (id=46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0xc048aec8, &(0x7f0000000000)={0x40004}) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000001080)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x8800, 0x1) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xa, 0x9}}, 0x10040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000580)="a04aa5bf33508f67b4db0c62073be7755a9d3f2c6ab4219395c6d5c67b1c30cbc2d80c7bc7417f86b72ec4bdab4e901fdb11eb18b8efdec4a9d5a518516218c1b3598ee04b31deb391693e2b1045120d073be09710b7a1e6a672ef427703c4a9bfe0d91d84b53b0708eced24cecf35b108515671e4892dab5c93a511d34131f17d0a804dad7f8261d364910032d6174dc50a0d08b89dbdfdd9b1676ebc5fa6b90921a0478d7743de3f5de05b11dfe2459d4e2152c67fe904f5bf9430c8c4bec68f80c663dc91b89104fc30abb99ec7d05d8a8e2a77760dbe9b0d865f6be737c8cbe3104c28a341faec2d22a9c9b9104f27cb00d7cb750f18bf73cf430cb798ee796073d85d71165e4bb768e55b92f2ac2487f70135ad0f912422227070b8c744ae1f349f2d6ec65a681c104fa832ac4e927703dc1f09bb60a90d434b189386e0f4776fb6f784a691bbc11c05b38b416bb790265c03fd46dec6fb407f1959b0cffecf06e89aadf64cfc19c23b515e764d6eddc83ad673cfa7d4378c31b9d538be7d3b2f252f27ce6380b9a02033b62259325fbaade14ccff9f868eb09bcdbde4ac3bf3629812cdb10712e656b1443", 0x1ae, 0x0, &(0x7f0000000740)={0x2, 0x94, {0x0, 0xc, 0x8, "06c7a288fb323184", 0x7f, "64980e941aaa135a8f6c3bc82b552903f18585b552bfb091337adc09e6f1690321544c4931c292a84f20087a48a2235ad6736be838413f00285eca8c70b111d8748de0ef33e52b80e3444acf66e64fb3a2f9bfefb2a715c8985c7abd9b06d3a2851821612e34be2b8390cc8ddd15672f9c0beea1c0f40467424f900ad36b75"}, 0xb4, "cd0d3c8fe15cbbf05771d1f4b38d37491840f80388640003d32dece2a05532e1b65d4f5aac9365fbb9d25d47ba01ce0b6c3efc719cbb418c13d1df3e58812938267b58907b56f987d699f4377f49f514cf6953e7150eec773926d1f1824b78d5b3c04006debf0060623793fb4fcfe8e586a35747e0231382836171dc6fd9ed92361de3a5f7440ecf8f761f0000b95688b5ef8079a4d7bfb623124c9b6c861a80fc06d262d2421265980bdc3bbc08b7c92c625502"}, 0x154}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r9, 0x601, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x4020000) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40011) 8.796754727s ago: executing program 3 (id=47): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000440)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000700)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x8, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x9b5, 0xce, 0x2, 0x3, 0xe52f, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x67a, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3da, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x3, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000004, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0xdb4bf975, 0x9, 0xd, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x0, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0xb, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x9, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa], "354d52859e67242784b2d116258cd674e6f7a8a6a4121e789c83baf4c3a50a398640a4dc2fc81b58dbb571267492b55e6c08c88024448cb2ef70a24171f84c9efbacb6b98c218e44bd5e54b7fcfbb9df68a48f2a788ee358d193c551deed"}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) 8.544656921s ago: executing program 2 (id=48): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x5, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 7.826424728s ago: executing program 1 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xc0000010}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0xf, 0x803, 0x400) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r10, &(0x7f00000001c0)={'/usr/sbin/ntpd', 0x20, 'unconfined', 0x20, 0x5}, 0x2f) socket$inet6(0xa, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r11, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000140)=0x8) r12 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r12, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, 0x0, 0x0) sendmsg$key(r9, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020302030c0000000000000000000000030006002b000000020000000000040000000000000000000200010000000000004f6738349908000d0000000005000500000000000a004e2300000007fc0100000000000000000000000000002c00000000000000f3b3fd2fcfd85f52c822641225eb9d9eed"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff49, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4, 0x6, "a4f1fcc6909d4d6fd005510c3de215b5bc25bfb1317a92b24f0df0706b96c1d1f8d246c9fbf9501694a2ebedef4fa4a934bf2cc425bab8719ed2af2176239dc773d0382b1edc03713958660b508f134bf2cf05c6a6805d82c74fad14f52f82df56dac07fe17d0be0aa7aa682c4dbb8c14a7baf99eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 7.647825362s ago: executing program 3 (id=50): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1705e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_usb_connect(0x5, 0x50, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xd7, 0x2, 0xe5, 0x40, 0x4c1, 0x9d, 0xd2d0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3e, 0x2, 0x0, 0x0, 0x0, 0xca, [{{0x9, 0x4, 0xae, 0x7, 0x0, 0xd6, 0xf0, 0xd9, 0x1}}, {{0x9, 0x4, 0x42, 0x40, 0x0, 0xff, 0x8c, 0xa5, 0x4, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "aa"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2ebe, 0x10, 0x56}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xcd}]}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x12, 0x2, "ba28"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.278142163s ago: executing program 4 (id=51): syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r7, &(0x7f0000000140)="1e1508", 0x3) connect$qrtr(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d4}, 0x800) 6.734708224s ago: executing program 0 (id=52): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x8000) r1 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="1000ffffffffa0dbad415f4f6119", 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x800, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000001c0)={0x6, 0xf76d, 0xf}) getpid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x3}, 0x3) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0200020000000008000400010000", 0x23) sendto$inet(r1, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c", 0x12, 0x800, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$TCFLSH(r4, 0x400455c8, 0x4) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 6.588749897s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x40010102) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.405862726s ago: executing program 2 (id=54): socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 4.01312187s ago: executing program 4 (id=55): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfe1b) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe6b) 3.985523557s ago: executing program 3 (id=56): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4010) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000440)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000700)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x8, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x9b5, 0xce, 0x2, 0x3, 0xe52f, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x67a, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3da, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x3, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000004, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0xdb4bf975, 0x9, 0xd, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x0, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0xb, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x9, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa], "354d52859e67242784b2d116258cd674e6f7a8a6a4121e789c83baf4c3a50a398640a4dc2fc81b58dbb571267492b55e6c08c88024448cb2ef70a24171f84c9efbacb6b98c218e44bd5e54b7fcfbb9df68a48f2a788ee358d193c551deed"}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) 3.256868131s ago: executing program 1 (id=57): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1]) listen(r0, 0x80) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.006559076s ago: executing program 3 (id=58): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000012003700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001d"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.823196977s ago: executing program 0 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x5, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 2.668412741s ago: executing program 4 (id=60): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) socket(0x10, 0x803, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async, rerun: 64) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000001) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) (async) io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) getpid() r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000004c0)={[0x5836, 0x5, 0x7, 0xe4e, 0x1, 0x5479, 0x103d, 0x6, 0xffffffff, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x2000000000005, 0x6a], 0x2000, 0x808d6}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) 2.606464809s ago: executing program 2 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="6f73322e4021009afda26f87449eb287988b03ec"], &(0x7f0000000340)='GPL\x00', 0x4, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) (fail_nth: 6) sendmsg$nl_route_sched_retired(r4, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x804, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xfff3, 0xe}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x539b1cfd2cf5b5e5}, 0x40000) 1.972940344s ago: executing program 2 (id=62): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x5, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) 1.600814429s ago: executing program 4 (id=63): io_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 121.082526ms ago: executing program 3 (id=64): syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x0, 0x3}, 0x0, 0x0) memfd_create(&(0x7f0000000840)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0\xb6\xfb\xbd\x82\xca&\xb0\xcce\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xf2F,\xcf\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00600018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 3 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001000400"/20, @ANYRES32=r2, @ANYBLOB="0b000000000000000c001a800800028004140180080004"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 71.083764][ T30] audit: type=1400 audit(1757401220.561:62): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 71.089153][ T5832] cgroup: Unknown subsys name 'net' [ 71.106604][ T30] audit: type=1400 audit(1757401220.571:63): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.133967][ T30] audit: type=1400 audit(1757401220.591:64): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.277952][ T5832] cgroup: Unknown subsys name 'cpuset' [ 71.286204][ T5832] cgroup: Unknown subsys name 'rlimit' [ 71.433139][ T30] audit: type=1400 audit(1757401220.911:65): avc: denied { setattr } for pid=5832 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.465314][ T30] audit: type=1400 audit(1757401220.911:66): avc: denied { create } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.491454][ T30] audit: type=1400 audit(1757401220.911:67): avc: denied { write } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.516785][ T30] audit: type=1400 audit(1757401220.911:68): avc: denied { read } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.537527][ T30] audit: type=1400 audit(1757401220.931:69): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 71.544053][ T5834] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 71.565085][ T30] audit: type=1400 audit(1757401220.931:70): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 71.595538][ T30] audit: type=1400 audit(1757401220.961:71): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.267957][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.274525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.611839][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.440297][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 76.440313][ T30] audit: type=1400 audit(1757401225.921:78): avc: denied { create } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.486410][ T30] audit: type=1400 audit(1757401225.921:79): avc: denied { read write } for pid=5842 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.536743][ T30] audit: type=1400 audit(1757401225.921:80): avc: denied { open } for pid=5842 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.555409][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.569264][ T30] audit: type=1400 audit(1757401225.951:81): avc: denied { ioctl } for pid=5842 comm="syz-executor" path="socket:[4909]" dev="sockfs" ino=4909 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.595130][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.603709][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.626132][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.634243][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.642443][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.643212][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.658745][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.667417][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.675547][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.684022][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.692152][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.692296][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.710416][ T30] audit: type=1400 audit(1757401226.141:82): avc: denied { read } for pid=5845 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.732018][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.741639][ T30] audit: type=1400 audit(1757401226.141:83): avc: denied { open } for pid=5845 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.765418][ T30] audit: type=1400 audit(1757401226.191:84): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.786830][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.810711][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.824513][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.832449][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.840333][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.848719][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.873588][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.885537][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.893250][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.901605][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.914447][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.134753][ T30] audit: type=1400 audit(1757401226.611:85): avc: denied { module_request } for pid=5852 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.221612][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 77.285528][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.340455][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 77.465485][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.472686][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.481095][ T5852] bridge_slave_0: entered allmulticast mode [ 77.488616][ T5852] bridge_slave_0: entered promiscuous mode [ 77.510925][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 77.527892][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.535111][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.542224][ T5852] bridge_slave_1: entered allmulticast mode [ 77.549133][ T5852] bridge_slave_1: entered promiscuous mode [ 77.617929][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.625144][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.632265][ T5842] bridge_slave_0: entered allmulticast mode [ 77.641040][ T5842] bridge_slave_0: entered promiscuous mode [ 77.672727][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.679905][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.687215][ T5842] bridge_slave_1: entered allmulticast mode [ 77.693912][ T5842] bridge_slave_1: entered promiscuous mode [ 77.711495][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.725831][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.732999][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.740278][ T5845] bridge_slave_0: entered allmulticast mode [ 77.747240][ T5845] bridge_slave_0: entered promiscuous mode [ 77.772513][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.791909][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 77.801498][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.808811][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.816051][ T5845] bridge_slave_1: entered allmulticast mode [ 77.822680][ T5845] bridge_slave_1: entered promiscuous mode [ 77.833754][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.845977][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.868523][ T5852] team0: Port device team_slave_0 added [ 77.916607][ T5852] team0: Port device team_slave_1 added [ 77.984201][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.993513][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.000785][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.009369][ T5855] bridge_slave_0: entered allmulticast mode [ 78.016368][ T5855] bridge_slave_0: entered promiscuous mode [ 78.024110][ T5842] team0: Port device team_slave_0 added [ 78.031731][ T5842] team0: Port device team_slave_1 added [ 78.038721][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.046085][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.072286][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.090111][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.099577][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.107376][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.114593][ T5855] bridge_slave_1: entered allmulticast mode [ 78.122056][ T5855] bridge_slave_1: entered promiscuous mode [ 78.144888][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.151845][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.177949][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.242058][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.249481][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.275502][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.291168][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.298393][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.305649][ T5857] bridge_slave_0: entered allmulticast mode [ 78.312314][ T5857] bridge_slave_0: entered promiscuous mode [ 78.320362][ T5845] team0: Port device team_slave_0 added [ 78.328569][ T5845] team0: Port device team_slave_1 added [ 78.336315][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.348433][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.358086][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.365401][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.391462][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.409480][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.416700][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.423813][ T5857] bridge_slave_1: entered allmulticast mode [ 78.432139][ T5857] bridge_slave_1: entered promiscuous mode [ 78.482456][ T5855] team0: Port device team_slave_0 added [ 78.498786][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.506109][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.532433][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.560422][ T5855] team0: Port device team_slave_1 added [ 78.568252][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.580365][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.590004][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.597279][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.623385][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.648037][ T5852] hsr_slave_0: entered promiscuous mode [ 78.654262][ T5852] hsr_slave_1: entered promiscuous mode [ 78.706953][ T5842] hsr_slave_0: entered promiscuous mode [ 78.713088][ T5842] hsr_slave_1: entered promiscuous mode [ 78.719270][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 78.726032][ T5842] Cannot create hsr debugfs directory [ 78.740517][ T5857] team0: Port device team_slave_0 added [ 78.747151][ T5853] Bluetooth: hci1: command tx timeout [ 78.754752][ T5853] Bluetooth: hci2: command tx timeout [ 78.756613][ T5857] team0: Port device team_slave_1 added [ 78.791841][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.799012][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.825985][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.836561][ T5853] Bluetooth: hci0: command tx timeout [ 78.838942][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.849626][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.875825][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.904768][ T5853] Bluetooth: hci3: command tx timeout [ 78.924510][ T5845] hsr_slave_0: entered promiscuous mode [ 78.930998][ T5845] hsr_slave_1: entered promiscuous mode [ 78.937236][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 78.943074][ T5845] Cannot create hsr debugfs directory [ 78.977433][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.984404][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.010946][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.022046][ T5853] Bluetooth: hci4: command tx timeout [ 79.023569][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.035011][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.061707][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.118525][ T5855] hsr_slave_0: entered promiscuous mode [ 79.125038][ T5855] hsr_slave_1: entered promiscuous mode [ 79.131095][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 79.136896][ T5855] Cannot create hsr debugfs directory [ 79.233545][ T5857] hsr_slave_0: entered promiscuous mode [ 79.240336][ T5857] hsr_slave_1: entered promiscuous mode [ 79.246586][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 79.252312][ T5857] Cannot create hsr debugfs directory [ 79.501372][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.513049][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.538875][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.562216][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.614609][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.637229][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.648414][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.662017][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.728000][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.745576][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.759433][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.770102][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.855178][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.867424][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.889810][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.899688][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.911523][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.983146][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.012811][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.020111][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.036483][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.058298][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065401][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.083275][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.090900][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.108435][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.119564][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.164583][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.188496][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.195626][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.221339][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.228475][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.258327][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.325467][ T30] audit: type=1400 audit(1757401229.801:86): avc: denied { sys_module } for pid=5852 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.370475][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.398995][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.406174][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.440339][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.447531][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.492844][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.518427][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.563235][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.583020][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.616418][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.640835][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.660458][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.667580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.678071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.685286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.703927][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.711073][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.737977][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.745639][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.822318][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.834960][ T5853] Bluetooth: hci2: command tx timeout [ 80.835692][ T5851] Bluetooth: hci1: command tx timeout [ 80.906823][ T5851] Bluetooth: hci0: command tx timeout [ 80.946597][ T5852] veth0_vlan: entered promiscuous mode [ 80.974368][ T5852] veth1_vlan: entered promiscuous mode [ 80.984856][ T5851] Bluetooth: hci3: command tx timeout [ 81.014343][ T5842] veth0_vlan: entered promiscuous mode [ 81.066090][ T5851] Bluetooth: hci4: command tx timeout [ 81.072917][ T5842] veth1_vlan: entered promiscuous mode [ 81.149233][ T5842] veth0_macvtap: entered promiscuous mode [ 81.158850][ T5842] veth1_macvtap: entered promiscuous mode [ 81.167929][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.193137][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.243246][ T5852] veth0_macvtap: entered promiscuous mode [ 81.259532][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.286781][ T5852] veth1_macvtap: entered promiscuous mode [ 81.297339][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.331363][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.349081][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.372650][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382012][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.400224][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.429557][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.456591][ T5855] veth0_vlan: entered promiscuous mode [ 81.483232][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.498344][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.512073][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.527623][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537788][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561285][ T5855] veth1_vlan: entered promiscuous mode [ 81.671372][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.679490][ T5845] veth0_vlan: entered promiscuous mode [ 81.684102][ T5845] veth1_vlan: entered promiscuous mode [ 81.693902][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.733367][ T5855] veth0_macvtap: entered promiscuous mode [ 81.749511][ T5857] veth0_vlan: entered promiscuous mode [ 81.762782][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.765274][ T5855] veth1_macvtap: entered promiscuous mode [ 81.778472][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.803723][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.813776][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.825501][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.843340][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.843382][ T5857] veth1_vlan: entered promiscuous mode [ 81.851739][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.885703][ T30] audit: type=1400 audit(1757401231.361:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.glfoBX/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 81.904688][ T5857] veth0_macvtap: entered promiscuous mode [ 81.921234][ T30] audit: type=1400 audit(1757401231.361:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.946123][ T30] audit: type=1400 audit(1757401231.401:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.glfoBX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.954281][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.976540][ T30] audit: type=1400 audit(1757401231.401:90): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.016888][ T30] audit: type=1400 audit(1757401231.411:91): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.glfoBX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.043901][ T30] audit: type=1400 audit(1757401231.411:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.glfoBX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.050582][ T5845] veth0_macvtap: entered promiscuous mode [ 82.072923][ T30] audit: type=1400 audit(1757401231.431:93): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.100912][ T30] audit: type=1400 audit(1757401231.491:94): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.103637][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.143472][ T30] audit: type=1400 audit(1757401231.501:95): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=7482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.149983][ T5845] veth1_macvtap: entered promiscuous mode [ 82.171709][ T30] audit: type=1400 audit(1757401231.501:96): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.197332][ T1315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.217823][ T5857] veth1_macvtap: entered promiscuous mode [ 82.228736][ T1315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.251994][ T1315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294483][ T1315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.327626][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.423594][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.453776][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.466591][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.619366][ T5966] UBIFS error (pid: 5966): cannot open "c:::", error -22 [ 82.925301][ T5851] Bluetooth: hci2: command tx timeout [ 82.938331][ T5853] Bluetooth: hci1: command tx timeout [ 82.997152][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.000397][ T5851] Bluetooth: hci0: command tx timeout [ 83.006952][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.096170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.166179][ T5851] Bluetooth: hci3: command tx timeout [ 83.222314][ T5851] Bluetooth: hci4: command tx timeout [ 83.235261][ T5962] Zero length message leads to an empty skb [ 83.245053][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.364866][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.391235][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.605322][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.642342][ T5959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.683800][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.725145][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.745510][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.814223][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.866829][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.889702][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.922391][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.934343][ T5972] tmpfs: Unknown parameter 'Îð_A†_\\ëáyž×¬Zý l8˜¹Ü¯‡èÉvüøžÓeTwj°Ö~T$­Ä;ú' [ 83.944724][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.019171][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.044427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.094983][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 84.156926][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.195955][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.250261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.259500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.280858][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.293997][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.316900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.324357][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 84.373107][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.514885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.573754][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.593608][ T5981] binder: 5980:5981 ioctl c0046209 0 returned -22 [ 84.618097][ T10] usb 4-1: config 0 descriptor?? [ 84.625225][ T5974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.661604][ T10] hub 4-1:0.0: USB hub found [ 84.704905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.713425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.775059][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.964388][ T10] hub 4-1:0.0: 2 ports detected [ 84.985759][ T5851] Bluetooth: hci2: command tx timeout [ 84.991383][ T5853] Bluetooth: hci1: command tx timeout [ 84.996274][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 85.095626][ T5987] qnx6: unable to read the first superblock [ 85.167521][ T5987] lo speed is unknown, defaulting to 1000 [ 85.173769][ T5987] lo speed is unknown, defaulting to 1000 [ 85.186543][ T5987] lo speed is unknown, defaulting to 1000 [ 85.210689][ T5987] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.252785][ T5987] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 85.344909][ T5851] Bluetooth: hci0: command tx timeout [ 85.351587][ T5851] Bluetooth: hci3: command tx timeout [ 85.385252][ T5851] Bluetooth: hci4: command tx timeout [ 85.439962][ T5987] lo speed is unknown, defaulting to 1000 [ 85.446942][ T5987] lo speed is unknown, defaulting to 1000 [ 85.455403][ T5987] lo speed is unknown, defaulting to 1000 [ 85.462177][ T5987] lo speed is unknown, defaulting to 1000 [ 85.469012][ T5987] lo speed is unknown, defaulting to 1000 [ 85.509666][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.542237][ T24] usb 2-1: config 0 descriptor?? [ 85.552764][ T24] cp210x 2-1:0.0: cp210x converter detected [ 85.592482][ T5992] binder: 5991:5992 ioctl c0046209 0 returned -22 [ 85.684697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 85.734765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.754726][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.764267][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.800595][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 85.814959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.938196][ T10] usb 4-1: USB disconnect, device number 2 [ 85.987630][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 85.996360][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 86.020272][ T5904] usb 2-1: USB disconnect, device number 2 [ 86.079815][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.100236][ T5904] cp210x 2-1:0.0: device disconnected [ 86.271753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.034731][ T6003] UBIFS error (pid: 6003): cannot open "c:::", error -22 [ 87.070482][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 87.070516][ T30] audit: type=1400 audit(1757401236.301:145): avc: denied { read write } for pid=5999 comm="syz.1.10" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.070557][ T30] audit: type=1400 audit(1757401236.301:146): avc: denied { open } for pid=5999 comm="syz.1.10" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.224930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.246305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.637424][ T30] audit: type=1400 audit(1757401237.091:147): avc: denied { setopt } for pid=6005 comm="syz.1.11" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.662845][ T912] cfg80211: failed to load regulatory.db [ 87.671250][ T30] audit: type=1400 audit(1757401237.101:148): avc: denied { read } for pid=6005 comm="syz.1.11" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.694450][ T30] audit: type=1400 audit(1757401237.101:149): avc: denied { open } for pid=6005 comm="syz.1.11" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.859899][ T30] audit: type=1400 audit(1757401237.121:150): avc: denied { read } for pid=6012 comm="syz.3.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.342471][ T30] audit: type=1400 audit(1757401237.121:151): avc: denied { open } for pid=6012 comm="syz.3.12" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.465108][ T30] audit: type=1400 audit(1757401237.481:152): avc: denied { name_bind } for pid=6012 comm="syz.3.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.492219][ T30] audit: type=1400 audit(1757401237.481:153): avc: denied { node_bind } for pid=6012 comm="syz.3.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.530876][ T6022] sctp: [Deprecated]: syz.1.11 (pid 6022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.530876][ T6022] Use struct sctp_sack_info instead [ 88.614285][ T6023] UBIFS error (pid: 6023): cannot open "c:::", error -22 [ 89.179251][ T30] audit: type=1400 audit(1757401238.641:154): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.254118][ T6010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.263658][ T6010] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.309023][ T6010] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.333172][ T6010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.340531][ T6010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.532268][ T6010] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.564420][ T6010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.572958][ T6010] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.765396][ T6035] affs: No valid root block on device nullb0 [ 89.823857][ T6035] tipc: Enabling of bearer rejected, failed to enable media [ 90.204505][ T6010] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.296350][ T6010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.296416][ T6010] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.396585][ T6010] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.411524][ T6010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.419759][ T6010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.443810][ T6010] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.742360][ T6042] qnx6: unable to read the first superblock [ 90.794402][ T6042] siw: device registration error -23 [ 91.225502][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.340637][ T6045] UBIFS error (pid: 6045): cannot open "c:::", error -22 [ 91.512584][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.747974][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.267708][ T6052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.430140][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.436403][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.442679][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 92.442696][ T30] audit: type=1400 audit(1757401241.831:165): avc: denied { ioctl } for pid=6047 comm="syz.3.19" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.981829][ T6065] UBIFS error (pid: 6065): cannot open "c:::", error -22 [ 93.391313][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.545105][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.797226][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.957801][ T6079] sctp: [Deprecated]: syz.1.18 (pid 6079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.957801][ T6079] Use struct sctp_sack_info instead [ 94.574732][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.580866][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.771271][ T6066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.779366][ T6066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.786696][ T6066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.794684][ T6066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.802385][ T6066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.092193][ T6086] qnx6: unable to read the first superblock [ 96.141573][ T6086] siw: device registration error -23 [ 96.666795][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.824730][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.830791][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.905419][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.911542][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 96.932796][ T6088] nvme_fabrics: missing parameter 'transport=%s' [ 96.977646][ T6088] nvme_fabrics: missing parameter 'nqn=%s' [ 97.039824][ T30] audit: type=1400 audit(1757401246.521:166): avc: denied { write } for pid=6093 comm="syz.0.28" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.164690][ T5904] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 97.274728][ T5928] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.326297][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.335264][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.350247][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.411670][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.467313][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.480669][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.488298][ T5928] usb 1-1: config 4 has an invalid interface number: 156 but max is 0 [ 97.496612][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.507317][ T5928] usb 1-1: config 4 has no interface number 0 [ 97.513644][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.530811][ T5928] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 97.541291][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.615844][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.657889][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.674961][ T5928] usb 1-1: Product: syz [ 97.679407][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.690795][ T5928] usb 1-1: Manufacturer: syz [ 97.695577][ T5928] usb 1-1: SerialNumber: syz [ 97.701854][ T5904] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.711549][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.723255][ T5904] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.741276][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 97.754393][ T5928] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 97.764159][ T5928] usb 1-1: setting power ON [ 97.769588][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 97.777580][ T5904] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 97.790561][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.810140][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 97.861273][ T5904] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.879367][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.894348][ T5928] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 97.936033][ T5928] dvb_usb_cxusb 1-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 97.956069][ T5904] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.983983][ T6091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.094330][ T5928] usb 1-1: USB disconnect, device number 2 [ 98.206460][ T5964] usb 2-1: USB disconnect, device number 3 [ 99.848148][ T30] audit: type=1400 audit(1757401249.331:167): avc: denied { create } for pid=6123 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.879279][ T30] audit: type=1400 audit(1757401249.361:168): avc: denied { setopt } for pid=6123 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.015528][ T6126] affs: No valid root block on device nullb0 [ 100.381909][ T6126] tipc: Started in network mode [ 100.386913][ T6126] tipc: Node identity f67b0f9d1079, cluster identity 4711 [ 100.394222][ T6126] tipc: Enabled bearer , priority 0 [ 100.417454][ T6115] tipc: Disabling bearer [ 100.543355][ T6129] sctp: [Deprecated]: syz.1.32 (pid 6129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.543355][ T6129] Use struct sctp_sack_info instead [ 100.767058][ T6122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.778080][ T6122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.784224][ T6122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.800620][ T6122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.344448][ T6122] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.581748][ T30] audit: type=1800 audit(1757401251.051:169): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.30" name="/" dev="9p" ino=2 res=0 errno=0 [ 101.670323][ T6124] lo speed is unknown, defaulting to 1000 [ 101.718606][ T30] audit: type=1400 audit(1757401251.131:170): avc: denied { create } for pid=6123 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.042206][ T30] audit: type=1400 audit(1757401251.131:171): avc: denied { setopt } for pid=6123 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.062393][ T30] audit: type=1400 audit(1757401251.431:172): avc: denied { write } for pid=6131 comm="syz.2.36" name="route" dev="proc" ino=4026533351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 102.085095][ T30] audit: type=1400 audit(1757401251.451:173): avc: denied { read write } for pid=6123 comm="syz.0.35" name="vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.108332][ T30] audit: type=1400 audit(1757401251.451:174): avc: denied { open } for pid=6123 comm="syz.0.35" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.131369][ T30] audit: type=1400 audit(1757401251.451:175): avc: denied { ioctl } for pid=6123 comm="syz.0.35" path="/dev/vbi1" dev="devtmpfs" ino=955 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.671000][ T6118] syz.3.34 (6118): drop_caches: 2 [ 102.858213][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.865273][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.871506][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.912251][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.924542][ T30] audit: type=1400 audit(1757401251.501:176): avc: denied { bind } for pid=6123 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.003739][ T6147] UBIFS error (pid: 6147): cannot open "c:::", error -22 [ 103.022301][ T5964] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.264945][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 103.384591][ T5964] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 103.394777][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.411502][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.434826][ T5964] usb 5-1: Product: syz [ 103.441318][ T5964] usb 5-1: Manufacturer: syz [ 103.462668][ T5964] usb 5-1: SerialNumber: syz [ 103.475938][ T5964] usb 5-1: config 0 descriptor?? [ 103.486105][ T5964] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 104.100463][ T6154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.166601][ T6155] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 104.309779][ T5964] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 104.853669][ T6148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.089904][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.571629][ T6160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.184262][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 106.197891][ T6175] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.211590][ T5928] usb 5-1: USB disconnect, device number 2 [ 106.249498][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 106.249515][ T30] audit: type=1400 audit(1757401255.661:187): avc: denied { ioctl } for pid=6172 comm="syz.1.43" path="socket:[9333]" dev="sockfs" ino=9333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.281137][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.303752][ T5928] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 106.332948][ T5928] visor 5-1:0.0: device disconnected [ 106.571569][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 106.964690][ T30] audit: type=1400 audit(1757401256.361:188): avc: denied { create } for pid=6179 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.295423][ T30] audit: type=1400 audit(1757401256.361:189): avc: denied { write } for pid=6179 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.435533][ T6189] capability: warning: `syz.4.46' uses 32-bit capabilities (legacy support in use) [ 107.858884][ T6197] UBIFS error (pid: 6197): cannot open "c:::", error -22 [ 108.576110][ T6201] sctp: [Deprecated]: syz.2.48 (pid 6201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.576110][ T6201] Use struct sctp_sack_info instead [ 108.621010][ T30] audit: type=1400 audit(1757401258.101:190): avc: denied { create } for pid=6203 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.650481][ T30] audit: type=1400 audit(1757401258.121:191): avc: denied { connect } for pid=6203 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.777747][ T30] audit: type=1400 audit(1757401258.121:192): avc: denied { write } for pid=6203 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.927564][ T30] audit: type=1400 audit(1757401258.151:193): avc: denied { read } for pid=6199 comm="syz.1.49" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.985744][ T6196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.039380][ T30] audit: type=1400 audit(1757401258.151:194): avc: denied { open } for pid=6199 comm="syz.1.49" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.131116][ T30] audit: type=1400 audit(1757401258.161:195): avc: denied { write } for pid=6199 comm="syz.1.49" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.196790][ T30] audit: type=1400 audit(1757401258.281:196): avc: denied { getopt } for pid=6199 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.367121][ T6196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.412238][ T6196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.424560][ T6196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.431500][ T6196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.490904][ T1332] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.699873][ T6219] qnx6: unable to read the first superblock [ 109.731109][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.142315][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.294688][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 110.302299][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 110.314518][ T5928] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 110.314747][ T43] usb 1-1: device descriptor read/64, error -71 [ 110.339695][ T5928] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 110.354558][ T5928] usb 4-1: Product: syz [ 110.362881][ T5928] usb 4-1: Manufacturer: syz [ 110.367651][ T5928] usb 4-1: SerialNumber: syz [ 110.575989][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.587738][ T5928] usb 4-1: Invalid connection information received from device [ 110.714882][ T43] usb 1-1: device descriptor read/64, error -71 [ 110.790892][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.800836][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.826563][ T43] usb usb1-port1: attempt power cycle [ 111.064777][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.176657][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.205454][ T43] usb 1-1: device descriptor read/8, error -71 [ 111.384826][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.455045][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.464846][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.464866][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.470937][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.477587][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.505581][ T43] usb 1-1: device descriptor read/8, error -71 [ 111.615717][ T43] usb usb1-port1: unable to enumerate USB device [ 111.906624][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 111.906647][ T30] audit: type=1400 audit(1757401261.321:204): avc: denied { bind } for pid=6224 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.940420][ T5928] usb 4-1: USB disconnect, device number 3 [ 111.964557][ T30] audit: type=1400 audit(1757401261.321:205): avc: denied { name_bind } for pid=6224 comm="syz.2.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.991393][ T30] audit: type=1400 audit(1757401261.321:206): avc: denied { node_bind } for pid=6224 comm="syz.2.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 112.032268][ T6227] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 112.058561][ T6227] batman_adv: batadv0: Adding interface: team0 [ 112.064858][ T6227] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.135129][ T6227] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 112.138547][ T30] audit: type=1400 audit(1757401261.381:207): avc: denied { create } for pid=6224 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.203247][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 112.390001][ T30] audit: type=1400 audit(1757401261.391:208): avc: denied { ioctl } for pid=6224 comm="syz.2.54" path="socket:[9469]" dev="sockfs" ino=9469 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.441580][ T6235] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 112.531279][ T6237] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 112.670533][ T6238] UBIFS error (pid: 6238): cannot open "c:::", error -22 [ 112.725936][ T6235] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.55'. [ 113.011055][ T30] audit: type=1400 audit(1757401261.511:209): avc: denied { sys_module } for pid=6224 comm="syz.2.54" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.102743][ T6237] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.55'. [ 113.208420][ T30] audit: type=1400 audit(1757401262.681:210): avc: denied { read } for pid=6240 comm="syz.1.57" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.231895][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.333260][ T30] audit: type=1400 audit(1757401262.681:211): avc: denied { open } for pid=6240 comm="syz.1.57" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 113.474910][ T5904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.525100][ T30] audit: type=1400 audit(1757401263.001:212): avc: denied { read } for pid=6245 comm="syz.4.60" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.547542][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.555367][ T5928] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 113.598248][ T6246] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 113.609523][ T6246] SELinux: failed to load policy [ 113.721177][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 113.731808][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.746614][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.773034][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.786555][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.811538][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.838135][ T6256] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 114.117728][ T6259] sctp: [Deprecated]: syz.0.59 (pid 6259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.117728][ T6259] Use struct sctp_sack_info instead [ 114.147773][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 114.171360][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.188573][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.217482][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.229155][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.239526][ T5928] usb 4-1: config 0 descriptor?? [ 114.248564][ T5904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.262861][ T5904] usb 2-1: Manufacturer: syz [ 114.268011][ T6242] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.296262][ T5928] hub 4-1:0.0: USB hub found [ 114.329837][ T5904] usb 2-1: config 0 descriptor?? [ 114.414462][ T6255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.422022][ T6255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.430351][ T6255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.441491][ T6255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.450523][ T6255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.501298][ T5928] hub 4-1:0.0: 2 ports detected [ 114.894963][ T6266] sctp: [Deprecated]: syz.2.62 (pid 6266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.894963][ T6266] Use struct sctp_sack_info instead [ 115.164544][ T6242] netlink: 'syz.3.58': attribute type 29 has an invalid length. [ 115.374911][ T5904] rc_core: IR keymap rc-hauppauge not found [ 115.381264][ T5904] Registered IR keymap rc-empty [ 115.387179][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.414958][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.436311][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.475493][ T5928] usb 4-1: USB disconnect, device number 4 [ 115.630416][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 115.668180][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.705806][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.736287][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.766123][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.790606][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.832917][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.859765][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.917463][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.957609][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.994779][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.054913][ T5904] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 116.098588][ T5904] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.137639][ T5904] usb 2-1: USB disconnect, device number 4 [ 116.169354][ T5851] ================================================================== [ 116.177454][ T5851] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 116.185585][ T5851] Read of size 8 at addr ffff88802ac07188 by task kworker/u9:4/5851 [ 116.193669][ T5851] [ 116.196035][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 116.196063][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.196081][ T5851] Workqueue: hci1 hci_rx_work [ 116.196112][ T5851] Call Trace: [ 116.196127][ T5851] [ 116.196135][ T5851] dump_stack_lvl+0x116/0x1f0 [ 116.196172][ T5851] print_report+0xcd/0x630 [ 116.196207][ T5851] ? __virt_addr_valid+0x81/0x610 [ 116.196238][ T5851] ? __phys_addr+0xe8/0x180 [ 116.196268][ T5851] ? l2cap_sock_ready_cb+0x16a/0x170 [ 116.196292][ T5851] kasan_report+0xe0/0x110 [ 116.196315][ T5851] ? l2cap_sock_ready_cb+0x16a/0x170 [ 116.196346][ T5851] l2cap_sock_ready_cb+0x16a/0x170 [ 116.196373][ T5851] l2cap_le_start+0x1ea/0xe40 [ 116.196406][ T5851] ? __pfx_l2cap_le_start+0x10/0x10 [ 116.196438][ T5851] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 116.196456][ T5851] ? __l2cap_chan_add+0x3e6/0xa20 [ 116.196475][ T5851] l2cap_connect_cfm+0x8f4/0xf80 [ 116.196495][ T5851] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 116.196514][ T5851] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 116.196533][ T5851] le_conn_complete_evt+0x1662/0x1d70 [ 116.196551][ T5851] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 116.196566][ T5851] ? hci_event_packet+0x459/0x11c0 [ 116.196583][ T5851] hci_le_conn_complete_evt+0x23c/0x370 [ 116.196609][ T5851] hci_le_meta_evt+0x354/0x5e0 [ 116.196631][ T5851] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 116.196652][ T5851] hci_event_packet+0x682/0x11c0 [ 116.196671][ T5851] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 116.196695][ T5851] ? __pfx_hci_event_packet+0x10/0x10 [ 116.196714][ T5851] ? kcov_remote_start+0x3c9/0x6d0 [ 116.196741][ T5851] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.196766][ T5851] hci_rx_work+0x2c5/0x16b0 [ 116.196788][ T5851] ? rcu_is_watching+0x12/0xc0 [ 116.196820][ T5851] process_one_work+0x9cc/0x1b70 [ 116.196850][ T5851] ? __pfx_process_one_work+0x10/0x10 [ 116.196873][ T5851] ? assign_work+0x1a0/0x250 [ 116.196891][ T5851] worker_thread+0x6c8/0xf10 [ 116.196914][ T5851] ? __kthread_parkme+0x19e/0x250 [ 116.196943][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 116.196963][ T5851] kthread+0x3c2/0x780 [ 116.196980][ T5851] ? __pfx_kthread+0x10/0x10 [ 116.196997][ T5851] ? rcu_is_watching+0x12/0xc0 [ 116.197019][ T5851] ? __pfx_kthread+0x10/0x10 [ 116.197036][ T5851] ret_from_fork+0x5d4/0x6f0 [ 116.197054][ T5851] ? __pfx_kthread+0x10/0x10 [ 116.197071][ T5851] ret_from_fork_asm+0x1a/0x30 [ 116.197110][ T5851] [ 116.197117][ T5851] [ 116.436015][ T5851] Allocated by task 6268: [ 116.440325][ T5851] kasan_save_stack+0x33/0x60 [ 116.444986][ T5851] kasan_save_track+0x14/0x30 [ 116.449651][ T5851] __kasan_kmalloc+0xaa/0xb0 [ 116.454215][ T5851] __kmalloc_noprof+0x223/0x510 [ 116.459048][ T5851] sk_prot_alloc+0x1a8/0x2a0 [ 116.463633][ T5851] sk_alloc+0x36/0xc20 [ 116.467699][ T5851] bt_sock_alloc+0x3b/0x3a0 [ 116.472195][ T5851] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 116.477987][ T5851] l2cap_sock_create+0x123/0x1f0 [ 116.482910][ T5851] bt_sock_create+0x182/0x350 [ 116.487568][ T5851] __sock_create+0x335/0x8d0 [ 116.492144][ T5851] __sys_socket+0x14d/0x260 [ 116.496649][ T5851] __x64_sys_socket+0x72/0xb0 [ 116.501322][ T5851] do_syscall_64+0xcd/0x4c0 [ 116.505828][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.511706][ T5851] [ 116.514015][ T5851] Freed by task 6267: [ 116.517995][ T5851] kasan_save_stack+0x33/0x60 [ 116.522672][ T5851] kasan_save_track+0x14/0x30 [ 116.527331][ T5851] kasan_save_free_info+0x3b/0x60 [ 116.532355][ T5851] __kasan_slab_free+0x60/0x70 [ 116.537102][ T5851] kfree+0x2b4/0x4d0 [ 116.540987][ T5851] __sk_destruct+0x75f/0x9a0 [ 116.545557][ T5851] sk_destruct+0xc2/0xf0 [ 116.549781][ T5851] __sk_free+0xf4/0x3e0 [ 116.553926][ T5851] sk_free+0x6a/0x90 [ 116.557803][ T5851] l2cap_sock_kill+0x171/0x2d0 [ 116.562558][ T5851] l2cap_sock_release+0x1c7/0x250 [ 116.567564][ T5851] __sock_release+0xb0/0x270 [ 116.572133][ T5851] sock_close+0x1c/0x30 [ 116.576315][ T5851] __fput+0x3ff/0xb70 [ 116.580340][ T5851] task_work_run+0x150/0x240 [ 116.585009][ T5851] exit_to_user_mode_loop+0xeb/0x110 [ 116.590294][ T5851] do_syscall_64+0x3f6/0x4c0 [ 116.594888][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.600767][ T5851] [ 116.603070][ T5851] The buggy address belongs to the object at ffff88802ac07000 [ 116.603070][ T5851] which belongs to the cache kmalloc-2k of size 2048 [ 116.617116][ T5851] The buggy address is located 392 bytes inside of [ 116.617116][ T5851] freed 2048-byte region [ffff88802ac07000, ffff88802ac07800) [ 116.630983][ T5851] [ 116.633283][ T5851] The buggy address belongs to the physical page: [ 116.639682][ T5851] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ac00 [ 116.648418][ T5851] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.656897][ T5851] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 116.664868][ T5851] page_type: f5(slab) [ 116.668861][ T5851] raw: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 116.677442][ T5851] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 116.686016][ T5851] head: 00fff00000000040 ffff88801b842000 0000000000000000 dead000000000001 [ 116.694675][ T5851] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 116.703347][ T5851] head: 00fff00000000003 ffffea0000ab0001 00000000ffffffff 00000000ffffffff [ 116.712004][ T5851] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 116.720644][ T5851] page dumped because: kasan: bad access detected [ 116.727041][ T5851] page_owner tracks the page as allocated [ 116.732729][ T5851] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5857, tgid 5857 (syz-executor), ts 80127973268, free_ts 80056349469 [ 116.754155][ T5851] post_alloc_hook+0x1c0/0x230 [ 116.758921][ T5851] get_page_from_freelist+0x132b/0x38e0 [ 116.764445][ T5851] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 116.770411][ T5851] alloc_pages_mpol+0x1fb/0x550 [ 116.775267][ T5851] new_slab+0x247/0x330 [ 116.779413][ T5851] ___slab_alloc+0xcf2/0x1750 [ 116.784081][ T5851] __slab_alloc.constprop.0+0x56/0xb0 [ 116.789435][ T5851] __kmalloc_cache_node_noprof+0x100/0x420 [ 116.795223][ T5851] page_pool_create_percpu+0x7a/0xcb0 [ 116.800581][ T5851] nsim_open+0x395/0x9d0 [ 116.804803][ T5851] __dev_open+0x2e7/0x7c0 [ 116.809108][ T5851] __dev_change_flags+0x55d/0x720 [ 116.814119][ T5851] netif_change_flags+0x8d/0x160 [ 116.819044][ T5851] do_setlink.constprop.0+0xb53/0x4380 [ 116.824481][ T5851] rtnl_newlink+0x1446/0x2000 [ 116.829396][ T5851] rtnetlink_rcv_msg+0x95e/0xe90 [ 116.834314][ T5851] page last free pid 5852 tgid 5852 stack trace: [ 116.840655][ T5851] __free_frozen_pages+0x7d5/0x10f0 [ 116.845835][ T5851] qlist_free_all+0x4d/0x120 [ 116.850399][ T5851] kasan_quarantine_reduce+0x195/0x1e0 [ 116.855845][ T5851] __kasan_slab_alloc+0x69/0x90 [ 116.860676][ T5851] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 116.866467][ T5851] sock_alloc_inode+0x25/0x1c0 [ 116.871212][ T5851] alloc_inode+0x61/0x240 [ 116.875545][ T5851] sock_alloc+0x40/0x280 [ 116.879767][ T5851] __sock_create+0xc1/0x8d0 [ 116.884255][ T5851] __sys_socket+0x14d/0x260 [ 116.888739][ T5851] __x64_sys_socket+0x72/0xb0 [ 116.893390][ T5851] do_syscall_64+0xcd/0x4c0 [ 116.897904][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.903778][ T5851] [ 116.906092][ T5851] Memory state around the buggy address: [ 116.911710][ T5851] ffff88802ac07080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.919760][ T5851] ffff88802ac07100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.927886][ T5851] >ffff88802ac07180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.935925][ T5851] ^ [ 116.940662][ T5851] ffff88802ac07200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.948724][ T5851] ffff88802ac07280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.956766][ T5851] ================================================================== [ 116.994873][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 116.994889][ T30] audit: type=1400 audit(1757401266.471:242): avc: denied { remove_name } for pid=6291 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2286 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.041632][ T5169] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.050337][ T5169] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.059420][ T5851] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.066641][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 117.076103][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.086164][ T5851] Workqueue: hci1 hci_rx_work [ 117.090884][ T5851] Call Trace: [ 117.094164][ T5851] [ 117.097092][ T5851] dump_stack_lvl+0x3d/0x1f0 [ 117.101689][ T5851] vpanic+0x6e8/0x7a0 [ 117.105693][ T5851] ? __pfx_vpanic+0x10/0x10 [ 117.110209][ T5851] ? l2cap_sock_ready_cb+0x16a/0x170 [ 117.115513][ T5851] panic+0xca/0xd0 [ 117.119250][ T5851] ? __pfx_panic+0x10/0x10 [ 117.123675][ T5851] ? l2cap_sock_ready_cb+0x16a/0x170 [ 117.128949][ T5851] ? preempt_schedule_common+0x44/0xc0 [ 117.134385][ T5851] ? preempt_schedule_thunk+0x16/0x30 [ 117.139744][ T5851] check_panic_on_warn+0xab/0xb0 [ 117.144669][ T5851] end_report+0x107/0x170 [ 117.148979][ T5851] kasan_report+0xee/0x110 [ 117.153376][ T5851] ? l2cap_sock_ready_cb+0x16a/0x170 [ 117.158641][ T5851] l2cap_sock_ready_cb+0x16a/0x170 [ 117.163765][ T5851] l2cap_le_start+0x1ea/0xe40 [ 117.168420][ T5851] ? __pfx_l2cap_le_start+0x10/0x10 [ 117.173608][ T5851] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 117.179559][ T5851] ? __l2cap_chan_add+0x3e6/0xa20 [ 117.184564][ T5851] l2cap_connect_cfm+0x8f4/0xf80 [ 117.189476][ T5851] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 117.194908][ T5851] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 117.200438][ T5851] le_conn_complete_evt+0x1662/0x1d70 [ 117.205793][ T5851] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 117.211504][ T5851] ? hci_event_packet+0x459/0x11c0 [ 117.216588][ T5851] hci_le_conn_complete_evt+0x23c/0x370 [ 117.222106][ T5851] hci_le_meta_evt+0x354/0x5e0 [ 117.226843][ T5851] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 117.232885][ T5851] hci_event_packet+0x682/0x11c0 [ 117.237796][ T5851] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 117.243058][ T5851] ? __pfx_hci_event_packet+0x10/0x10 [ 117.248412][ T5851] ? kcov_remote_start+0x3c9/0x6d0 [ 117.253493][ T5851] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.258683][ T5851] hci_rx_work+0x2c5/0x16b0 [ 117.263161][ T5851] ? rcu_is_watching+0x12/0xc0 [ 117.267907][ T5851] process_one_work+0x9cc/0x1b70 [ 117.272817][ T5851] ? __pfx_process_one_work+0x10/0x10 [ 117.278158][ T5851] ? assign_work+0x1a0/0x250 [ 117.282733][ T5851] worker_thread+0x6c8/0xf10 [ 117.287307][ T5851] ? __kthread_parkme+0x19e/0x250 [ 117.292306][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 117.297394][ T5851] kthread+0x3c2/0x780 [ 117.301455][ T5851] ? __pfx_kthread+0x10/0x10 [ 117.306029][ T5851] ? rcu_is_watching+0x12/0xc0 [ 117.310789][ T5851] ? __pfx_kthread+0x10/0x10 [ 117.315347][ T5851] ret_from_fork+0x5d4/0x6f0 [ 117.319907][ T5851] ? __pfx_kthread+0x10/0x10 [ 117.324464][ T5851] ret_from_fork_asm+0x1a/0x30 [ 117.329203][ T5851] [ 117.332392][ T5851] Kernel Offset: disabled [ 117.336686][ T5851] Rebooting in 86400 seconds..