last executing test programs: 2.016792411s ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4532, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) gettid() openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008080}, 0x24004095) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0xe56a029c4c02d733) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000080)=0x7f) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x54, 0x2, 0x4, 0x7fffffff}]}) socket$inet(0x2, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.552368274s ago: executing program 1 (id=2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2a, 0x8000, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000004}, 0x20040000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0x24, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', r4, 0x8000, 0x7, 0x7, 0x4, {{0x1d, 0x4, 0x1, 0x6, 0x74, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0xc, 0x41, 0x3, 0x8, [{@local, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x1, [{@multicast2, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xe2, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}, @end, @generic={0xb, 0xb, "c95ed65ec4b50194cd"}, @timestamp={0x44, 0xc, 0x36, 0x0, 0xd, [0x0, 0x5]}, @lsrr={0x83, 0x7, 0xb6, [@multicast2]}, @ssrr={0x89, 0x7, 0x3c, [@local]}, @ra={0x94, 0x4}]}}}}}) 1.417159386s ago: executing program 2 (id=3): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) write(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000100)=@x86={0x9, 0x3, 0x8, 0x0, 0x101, 0xc, 0x1, 0xff, 0x7, 0x37, 0x2, 0x3d, 0x0, 0x4, 0x26, 0x4, 0x0, 0xff, 0x1, '\x00', 0x5, 0x6}) acct(&(0x7f0000000040)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x40) close_range(r2, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 939.675234ms ago: executing program 3 (id=6): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c0}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x1, 0x0, {0x1, 0x2, 0x0, 0x8, 0x0, 0x1}, 0x800, 0x4, 0x8}}]}, 0x54}}, 0x1) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c0}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x1, 0x0, {0x1, 0x2, 0x0, 0x8, 0x0, 0x1}, 0x800, 0x4, 0x8}}]}, 0x54}}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x70}}, 0x890) sendto(r0, &(0x7f0000000300)="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", 0xff, 0x4000001, &(0x7f0000000400)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1fffffffd}, 0x80) syz_clone(0x880, &(0x7f0000000480)="16f3b30fab851575b9905445b8c32b81afaff22a2dfeb36c3e0ef15d6940c5fe89c5ce66105a74940dc09a0299f0415669fc9912dbb833715109a35b357b231bb44ee121f545", 0x46, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="44b2657e36f9ca691dd1994b54928818bcb723d77ebcb24a6adbe76532ed0005ae7082bd233ef2aed7cf0ee02cd4fc9260ed38029c62b316bc8b60184612f963062066e7509f7db45c5cceadd5a6a5ba08fa669f13de569940eb8559e5242fb43eb5d13850f2bba5ea3dae9c6a48b6d1c8e315956c420eb8417dd8ee3c768e0c77b2f60246465cfd8f2367c93b1c0d65e147cd72c27241737c4352fd1397711126914878ef2199e2d8d7f812579559fa8eeaf284eaf1a2493a67b373f76db09ee288c56d068e78902fe3ae05cbb96ddb84009a8573541d3003d8c9f2e523b498ab57ad82c53865fe8dfd342eaec09837667fb2b3761a816809c7a16b2d354832805564c5409efbec66aca957a0924ef278a8c46dea4fd0222a141caebf145edbc63d983dc1b424cf961540c616bee5925cf94743e10f9ef65b3f0ec00c6a506e24171e20ef196ee34dfcb8d9fd8b01908f7f8bbff7b1e4a2dd9b4cfa7edcbdbab04f105d616a00d71c8c4a346cb0b15b317b30ae379dc41a746c106576739cf3c110247bc941310ce06259c6d6c86e61e6e26a40dd0238d08f79c2ab9005e127ce4870b6e50ab1a97ac786f9da1ca89b383c3a1b82397fc7ff442fdad5f2404d83698a07a5ebb07fcab66cb89fa62f34fb9aa29b6cb4f94bb55c2611257caa352098547443ac5aec99d663e99e3310771e43a8f591f96bcfde984e56a7c52b6b12a8ca579b5eb8f650b502d11c1e5948eb136faadc34520b98ecc11e1031e793aa3bd3461d9941fb5028c889eccd06bc45060396c787828ae0f189d4d4d659e72c4d3b9eacdea8b0d214737f12160daca4a03b3ad43efb8fd892521e83bade4643f4fec2b8c11b027477e6a18d06f57972d3268f1913b56ab203f17d226db560cbb33853ed2a4c9ce9824c3d397206fce0f912c0dd7d58ed97407ba0d9cf2c74824ccabae05bb6942c5d27975136bfe92135e883943ba3f29500206c1d0ad1e65009748a0d3ddf6905ade09a228bc4083198fef74ab3a3f2fca2a4a82e2db3a6e7f29de9e2c9b2886e1c26612e32e18c7ced0a17e78520d62febd376810f44360866bb97162adb44a7d7aaa5ec00c0ba55052db5483ea8f25e0429fa3fccbc3bd0b180763854c482ee46f18dd77e0c6b9445c1469a3aca45d3191badaca166b213f289c8cf2d861087151f38956c0ec066de01b1b82d46b2787380a1b45a488e0208657bd9cf2b623c82eaf2b1d1ad56ee0762e81289e345169026a5b6ebe1bbb70a10e7433ee34b7ff2ca073c0700125913f61a628b21a8dcf84359a78ae12b14ff1902d94c61a5e9501a782bda60bbf40d0cc16cc4fe94307958a5730ff06f38329349ed9413bf7ee0358d1dcf66026280b8ac28d25753d51512570ebf7e85195514c8397bc0845456687b719d8f9a8951327beb1a99420231c7b6661059b0d4eca3ef21992f9b9eb6e4ae9329aa7d7343823dd196f2da88d7b17f982d4e4323e00dd3a0f9bd72a9cabcc8a06e01b8d6724ded2b32a079df1458160982b32d04e8ba05f3f427631b3702b9e0bd1884f5bbe71ac13afd64a8d56bc6fdc0d8216931359c10702497677a459dbf0da334a272b342b02bdac34efda0fb2498645792c24e7f815484336ede1a1273bca827c2baa1d86fc6c8c33c09c69fde95ee2d5f94b1a2f80b3cf3bd5078566fb53785cb4f3aed40d5db39383c6f9e330921a3aff2d0c48287c7720b161be5ac688963435fc1ad5ca2fec5c36f5e57fbd22f32b59ad3a6d7756e41d622534cca14bb5f7e2c16f146916958c5cff6414b9d1211e7530c12d7a2afc69f2ac919ec26f97ae6bc70382bc48bc49bbf2202b96410fb87e8cd8f7ab0fff7886971d40b5c3680dc22d7588744ebba144e73ebf65415e8aa735c2fb7ddbb0f9505768748eb0e2f1b0e00a28a13cb564eefae84c925f421ebb053fe459d7ea43b537b58c7be7a2d2796e67edbb963829b9074846a7c4973e523e8eb9774adc90a3f8b78793004f99d5408e8ba4c99584d898cc7b4da6ebb194b837005f5d650d95c425b0ced56540b61466ad03fbdb4673ef12db1b844398e31cb13bd6c3717bb232f206fe0600faa11dae34d66ccdd0332bcd1d18e24416e544604eb40ee7eb88e779a5efbe58945acb53632f81d4b3a1a7bfbd7ab40d05f982eef3da73753a8df48211cab59061ff31578d7d536df40f8cf3d29dd9632ad7a055ecc3f8409a5d04c40d11f66727b4094f562d204d50d9bc07f9389e14fd6f1eb10d347c83f107dc9e58985ee9e3addef47495020be415dbbdc97a29ce31cbefe213bb9ae6a0c339e41ad74a367646dee25943778077bedd2138516029d0d35698777982b0d4c585915f36b3420e63210131e37ed8cde635595fb2d5e09e25759fcdde1afb58f4f436c84cd5e6477016645ab025a7f264523401ce40ebf8641fe57dbf4d6252facdbb13b54ece6ab41737b3f982f86155c1e53b9d438f2d1f8915c37d29a3bbc1d44308e79b5e6fb102cb6cbb4042b887f2d56304c29451df74ead426eecdb9bb271ebb00e310b1f99866fc519e16f8f187d7b2b3d4e08f8f0b798ff9e4742f65bde7ba6b341d9916e276200cb0448790327471201511c0d4fe76c6ad014daf860e78a944ee8607bece231a23da08d0f06be14829b97d5f246f0c6eaf817c0e80a77a802911d839f8cf62ae6c77e4a292f3657a6be6f2a4f32fd69d5942e0070edc1dd70bb96dfc0e58df0cb6252405bbf434f690854df944261c8f1da47839254ea9e80095c7918e2fae310a937fea43dd40d9278ee4a15ca00abe22aa796d2a19deafe961236556cbfd9103e7672b6a431452e84c8d109932d0af0ec623ac5a0d59884becdd546dae14ba8d02ae7c448e4f90afd35ce327f8032aca205dd87cadb394386a134a664611fedff2354198ddf23a3f547bf3debac43dbfc319d93bf39ed5b8b4cf91ad3d305fecc7c4b74b32daf09caf4af2dd87313a2ef4abdd6f19d8543f88a97c8c3861965881b4ef5735bbf35d41f48f8aadc20d9d990486d5728dabfdca1b7c907bec89b20d757b8b847a08698c3cafda5ebc3696ad1241a757007760d31eb6be4285f3bd96a3c9c306d5467510a6dd0abf6613893a263bd24a5ccd558a68ebd838aab19119888e04e3181411ded79381603359dbf134432427f828235e053b703ef94e25b312383a5b522010034206bbff336713c4bc3ca0fb924b163a5af041aa74c42dd79409d1b35d0c5e2c8b02da0d7bf2c5886ba3708b569c66961acd098c42c3506212b22aa0af71e52452776a4bb3d14c3255201f53e1a7790dbf201b167ecdc0b8346f9b112f2c2937e1ef2ab300ad799073868b9e3bb29bfb1f0bf5a8e3ec8a71ad23c0348ced26c3da78f1771c8885163b701665f0ccd66e03ee17e19a13aba482061ebd353170ee49aa7809fbe67e363ceb39634ed54c77255382507ec8e6eb24b2742bd8209c8293f3a5250922f50b4629d83ba01a350b28659b3dc989ed821b1697b3928686c2e99d4ad4974a330d1819357f634125ea08c062f41e9fc1c093c74689a2540f2602f85b46cc529115ba110458325dd97dff405f8b0be98c47ca7830e5f232c054239f166e299268a610b9587bab6da225ce0922784e76964562af80b1647e1b5b37677d043a656dd9cf4cdbf95098e30889b94357ecb7c8a35dbf6323b6d9f4062e5862fbc57d83e4548e7cf4a97b19068c5f9d4f6d9db0280cc814db2eeb85e8ee36f408d3ae1ce85a29d183d8b5474a1e40cf1365ec8aba67d44e089030214261e2a8ec2f59e6b57dbe09ad82edf6407fe6e7a869e8ae32fd881e0463eb84877a02eab38aadbd82c893cc5c8007b9360f202c16cb51b4b9faad6f942f0d6c298ab3136d3b6712f218e099256f9040924f7a09375e5957b888a3adbf87dcdd6289d31f1f2ab54cd4024b2e470113371ddcc13ad13a89f934ef8d17e9aea77e804afa0fc59e8523b2739cc28da347cd394ffbc7c11fbabbf134259c709fbd3c79b94f6955c21a67ca9886d778d987dc1086b796765260187001f9a82e29609c251f45b886bf007c74e00ebb057ecd045ef66002d7bff35527fe2641d9f0f7a79409565d093233161bdb8d536b679571a0a5e7b336cc24102f9a74da80f5bde9a9c1789c72e4a22edfda77283fb0193dd0728cf917a9e0021b2518df38c9bc25d82f9aa9e855e37911c9892659c6ffd693937fabdea0152f6ab698d84939b6db83bef097389f4077f02a01135061057b70179294bd70d70ba4f8279dde66e07e8a4cb784051dcc9f84a3b206ec94c453f2c61c239dd8119071868666f6779d95cb1181f644043f854f5eb7b8c7f3d3b296e5e637c94f8c173ed91b5055042a1aa6c68ad06f0b52c7d41a69950fb1c5a7453a1c3387e593eb0b91ef1079dce8bdef18e1fe52d8e385d2811641da8bf2ee9b756ed0b4704b4846fd20e4ad483f2127ee1cce3c7a289965e146a1fd47931d659d2bde9b7fc88888cb5c3eb7e982e0b90822ebfdac39fddf7c767e2b19e8c6736304c0793aad558c9f4daadf09b41f5c38d588be853dc466a9a20d78a3e2b2a237bcea1786060b75d9ee5455354cd8b4ca97888f8cbcfd7984881ca10e80f0e9c47e140d252a0aefd47819a3808257ed52b08ec407679c896301c520bc5d20fe71246fededbc0f8d1cb1c66ac8195bcdf5a0dfbe4b95a4690552d2e70e20c3a4eb3d98b1a5c8f98fecbe5be7d5600d3d4a09436330527e201f6240cff544cc5a20dfb23eb8530b5077b8292cdc8f282118593b6e3d3267ed46c036118d04068ab053b338ecc228655fa8ffe081fa73399575247f49940dcbd3bfae97f505786123a5ddedf72619cd8b8dc741aa840cd6a5068190b5e793211f92d5184fc5a36760ae994e6dc4aa0fd91494979ba60dd5b91b8b8f79b722458b4a4329ac0e0315cc4bbd38b1da55b29cfb8c0e704b86cc0894c61c4aac11d7032d49cbeab6ed7e9c8dde54a39cec97ee5f19126ee83ab25250e0f8bf43f9d566fca7d9ccbe62ca7a5bd828a41972b1a2323a9edcd23550992b1cb5c156ddd906331b8d5a9eacef4da17f8fc36af06af1ddac1c9dd9b47295827638021db92380f01ebcfd40d024dfeeb6c44a3bf77657bd30a7a073df0911a4d4d00b47e7bf128e94bde12081fe4d4bf7038fdda3fe63adc6bdaf22df181ca6a7c7787201872d1860f3c43481691fcd4e73fb50d2d6e73414b2c20fbc3eec0404e930cefa3437208d790741c946f2e89e672490e33500201cb1f0fdb4bc496f016231e3a73b162aff109a8a41834489dffbdac1fe1f666fe79b58cd35f1229a7837614b3047094ee8c3919da123e7e73045e4d334ed3341e5334ecb7ff5a1887b7a8ea17c690e6c8a22fb255b9dc712ca2ba604c0992301dba19dec1a9baff31a5d6678802c63bfbade819f846d1d733292cbdcdcb7b75a8840da33537786c620fc3cc0d474e30e8eaa9d9eb378f0a98f9b520d0d8d9baaa39f3f453e32e55ea2be2be6c55a781cddfcf4d162502d7192b29c1ac50460d8f96cd74cfe879f2cfa32992436a9414694c4ee72c7ca55b5584d8061f1ee4579003663d161db6263307ec67980f23927f40a078e69ed0eae32cd4c4c1f61ec604d6a083f72e1a02e56cba99c8e29f54641a9c6078865100ca7ee345a5906d4161b711b0db3d6f87909199fd88dd1df1507dca0d12e6996f0787f5d7b18cbc4c0809357ae64562a6977e62d77f44470085a24f8e232d0944ad6e94f28a1457da30415d908fb14b94") (async) syz_clone(0x880, &(0x7f0000000480)="16f3b30fab851575b9905445b8c32b81afaff22a2dfeb36c3e0ef15d6940c5fe89c5ce66105a74940dc09a0299f0415669fc9912dbb833715109a35b357b231bb44ee121f545", 0x46, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002a00)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001600)={0x13b0, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x1ee, 0x2a, [@gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0x109, {0x66, 0x6, "da21fa88ebd8756d79e98779ca2bbbad", "b7b4a37641969e3db377c66540b843c3c390eaccdad898f2876ed5322ae92f56", "d6a6b499582ee54360d87440641ca29277abacdefd8af79cf947dd6977b81e37", [{0x2, 0x24, "a9a2dc02d9731d6994d8ae1d7bbf3f0cc951f951bb7c4105035e1861f4519efa5ac76d39"}, {0x3, 0x25, "3c7c9ec5d101a6dabe9b93e47bf5fec524987d510e5574eb8d0ac8710ad04749cca5b22bda"}, {0x2, 0xd, "7706cb39e901a8c3fae894e7d0"}, {0x4, 0x27, "58214715f948d076803445c00b35fb8cb2c43743229745073cae721ca34654e77bd537870df998"}, {0x1, 0x11, "838a40d4843afe5056655d5024c784dcf9"}, {0x4, 0x1d, "a63a74f7eaded0330f611ab35cfcd30875efbb2f26a0ad98e720e7226f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @tim={0x5, 0x3, {0xa, 0x2d, 0x81}}, @random={0xff, 0x37, "60a48ea386c0ae9fde57b8911cced27d9db0acfe6dc386c80e263946f655a740554825224270f2f8b7db11777e936c4b5a36dfb64e89d0"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x69}}, @random_vendor={0xdd, 0x32, "914f9def2082023c804dc940afe2d2156bcfc1846fc44c84aff8bff3d578158419e4f6a1ec2374b0ffa3363f8150e031f5ad"}, @preq={0x82, 0x51, {{0x0, 0x1, 0x1}, 0xfe, 0x6, 0x8, @device_a, 0x9, @void, 0xa59, 0x1de6, 0x5, [{{0x0, 0x0, 0x1}, @device_a, 0x3}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b}, {{}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @challenge={0x10, 0x1, 0xa2}, @dsss={0x3, 0x1, 0x40}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1190, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe1, 0x2, "404626cae7bb5efc1cc0246de8e59e07faa2cde6846ebe528103cb77c1dc7c3e7126e4eb7031572403e766cf7e42744bc0c8cf77b837b232785cb959c1d40f508c8aaad8d840f758dacd50ea30d49b770101a4e64791be384601f9d989f67a9494ce7c9d711eb061d97e74b48370535fecb7cbdc20412914da1a89957edb0f85ec7837d26126a3562c084c1546caabd4ec0e39f352b66620974db4c728b9fbbebf7c0d0c1814ca59cc771e7b6c499853e7410ad53e6192f1aa089c5014ed6904f33a749a44ec95521f99eb415a306ad062efc9bee92b9a5e75a5fec27c"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x9e, 0x3, "d7c7d36120915621ae4baab018290a8ee1ebef588721abad46f9f154e2a02b14d4bddf868b0848a31be02c21abef71042c84d022956b62bbe50bcebd554ae28a768ec054b10275e89d5c42b376c7096117079ef40a0e06cadd6aecda8466c83d088414efc310963ddad19f96a7d4885785f8bbd3e2b1ef9b8bde72289bd74243a53179b617f52328da261b835a9a878f3e238c54e81dfc6f11b1"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe7}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000c0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x800) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x48, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20804}, 0x0) (async) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x48, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20804}, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) setxattr$security_capability(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80), &(0x7f0000002dc0)=@v2={0x2000000, [{0x87f, 0x9}, {0xd2, 0x3}]}, 0x14, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000002e40)={0x0, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000002e40)={0x0, 0x1, 0x6, @local}, 0x10) stat(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x2090b4, &(0x7f0000002fc0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@posixacl}, {@aname={'aname', 0x3d, 'nl80211\x00'}}, {@dfltuid={'dfltuid', 0x3d, r10}}, {@fscache}, {@noxattr}, {@version_L}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, 'Y'}}]}}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003080)='/sys/kernel/kexec_loaded', 0x10000, 0x9) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x69}}}}, ["", "", "", ""]}, 0x28}}, 0x48d4) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x69}}}}, ["", "", "", ""]}, 0x28}}, 0x48d4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) chmod(&(0x7f00000031c0)='./file0\x00', 0x113) syz_clone(0x201100, &(0x7f0000003200)="917c9ff65294fb5cde4749965fee4b5cd2dcd9b7ee98f6f1eebbb7aa1ceb28f0ef35533385abc6209e717097da625ce7db55c2659bc5cc996f3fb236f503359354f352af6cbee6818a82a3aa97004d78e9c93c6ea5167916085af9a11e44b8b92fccc9a855c0180e0ffaea169fd0ae5c1e8edba8bf68ea79146f9f6ca2d4d019f1618dc5b53675146b", 0x89, &(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)="08885b46f8afe8999501be1425bcc5d351d49a121b31c4a5f90d99b717605760b365a465c4a2a4dd20d4416db076") setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000003380)=@ccm_128={{0x303}, "3b24e34db3e124de", "9a4a928a7d2b17e9fab56d2ca5ca5306", "fbe61e78", "ab9fba4f3e705bf1"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000003380)=@ccm_128={{0x303}, "3b24e34db3e124de", "9a4a928a7d2b17e9fab56d2ca5ca5306", "fbe61e78", "ab9fba4f3e705bf1"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f00000033c0)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000003440)=0x18000, 0x3, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000003540)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 913.604467ms ago: executing program 2 (id=7): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0xacc7a9a6e03b7f89, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0xf3c4650b338df0dd, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x28008040) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r4 = getpid() ioprio_set$pid(0x2, r4, 0x2000) 871.882199ms ago: executing program 0 (id=1): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x4, 0xffff, {"00000000f30000000000000000000001"}, 0xfffffffffffffffd, 0x7ff}}}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bc6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x8, 0x4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private0, 0xfffffffc}, 0x1c) 754.432117ms ago: executing program 4 (id=5): socket(0x2a, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x184) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000080071000040"]) landlock_restrict_self(r1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x8c, 0x0, &(0x7f0000000240)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @clear_death, @increfs={0x40046304, 0x2}, @acquire_done], 0x0, 0x1000000000000, 0x0}) socket(0x1e, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000fcffffffffffffff0000000000000022849b06cdf8a05f7c1f1a329bdfe5660bf96e0ef0777be7d2e1086ea150fb0cdaacb0dc6a8a9661a8ad790d0963a2fa870c27a1bc9fb323a949bc7d7ef4c62466c23a719dee338ac278de79e9cf9adff636ae2f9b05b4264ed859fb9e2584245c75115597c1b1c8fabf10b72492eebaa400e02aca13337d4fb417e2c424c5f97c704d495678f74bd4a688565355b971a8e8eef91ec975fab227ec9b40e10f23", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 500.321758ms ago: executing program 2 (id=8): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setstatus(r1, 0x4, 0x2800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) (fail_nth: 1) 365.909437ms ago: executing program 3 (id=9): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x23, 0xa1, 0x26, 0x8, 0x2770, 0x9120, 0xee8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd0, 0x97, 0x6e}}]}}]}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052fa}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbb}]}) (async) exit(0x7fffffffffffffff) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=10): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setstatus(r1, 0x4, 0x2800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.210' (ED25519) to the list of known hosts. [ 50.464803][ T29] audit: type=1400 audit(1732805364.554:88): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.469247][ T5822] cgroup: Unknown subsys name 'net' [ 50.487625][ T29] audit: type=1400 audit(1732805364.554:89): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.515086][ T29] audit: type=1400 audit(1732805364.584:90): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.653598][ T5822] cgroup: Unknown subsys name 'cpuset' [ 50.661259][ T5822] cgroup: Unknown subsys name 'rlimit' [ 50.867318][ T29] audit: type=1400 audit(1732805364.954:91): avc: denied { setattr } for pid=5822 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.898953][ T29] audit: type=1400 audit(1732805364.954:92): avc: denied { create } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.921445][ T29] audit: type=1400 audit(1732805364.954:93): avc: denied { write } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.942061][ T29] audit: type=1400 audit(1732805364.954:94): avc: denied { read } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.962805][ T29] audit: type=1400 audit(1732805364.964:95): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.976161][ T5825] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.988007][ T29] audit: type=1400 audit(1732805364.964:96): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.019594][ T29] audit: type=1400 audit(1732805365.004:97): avc: denied { read } for pid=5505 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 51.953675][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.146675][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.154103][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.165066][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.172763][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.173893][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.180658][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.188041][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.196579][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.202400][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.216416][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.220373][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.224055][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.238447][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.240786][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.245975][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.264657][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.264901][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.272582][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.279334][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.286210][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.296457][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.308120][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.316631][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.317502][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.326622][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.339686][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.347283][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.347379][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.364171][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.371532][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.626798][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 54.716641][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 54.815807][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 54.875491][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.883555][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.890996][ T5833] bridge_slave_0: entered allmulticast mode [ 54.897897][ T5833] bridge_slave_0: entered promiscuous mode [ 54.924564][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 54.937901][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.945127][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.952578][ T5833] bridge_slave_1: entered allmulticast mode [ 54.959037][ T5833] bridge_slave_1: entered promiscuous mode [ 54.986788][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.994036][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.001341][ T5841] bridge_slave_0: entered allmulticast mode [ 55.007817][ T5841] bridge_slave_0: entered promiscuous mode [ 55.018931][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.026127][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.033322][ T5841] bridge_slave_1: entered allmulticast mode [ 55.040200][ T5841] bridge_slave_1: entered promiscuous mode [ 55.074280][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 55.108195][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.122009][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.133470][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.169301][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.186635][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.193966][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.201715][ T5842] bridge_slave_0: entered allmulticast mode [ 55.208941][ T5842] bridge_slave_0: entered promiscuous mode [ 55.223655][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.230872][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.238052][ T5848] bridge_slave_0: entered allmulticast mode [ 55.245323][ T5848] bridge_slave_0: entered promiscuous mode [ 55.266726][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.273938][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.281230][ T5842] bridge_slave_1: entered allmulticast mode [ 55.287687][ T5842] bridge_slave_1: entered promiscuous mode [ 55.303176][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.310811][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.317938][ T5848] bridge_slave_1: entered allmulticast mode [ 55.324672][ T5848] bridge_slave_1: entered promiscuous mode [ 55.353023][ T5833] team0: Port device team_slave_0 added [ 55.373192][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.387098][ T5841] team0: Port device team_slave_0 added [ 55.394687][ T5833] team0: Port device team_slave_1 added [ 55.404775][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.415447][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.439037][ T5841] team0: Port device team_slave_1 added [ 55.451337][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.473494][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.480694][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.487865][ T5835] bridge_slave_0: entered allmulticast mode [ 55.494553][ T5835] bridge_slave_0: entered promiscuous mode [ 55.521083][ T5848] team0: Port device team_slave_0 added [ 55.527000][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.535042][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.542356][ T5835] bridge_slave_1: entered allmulticast mode [ 55.548929][ T5835] bridge_slave_1: entered promiscuous mode [ 55.565183][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.572390][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.598475][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.611761][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.618896][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.644847][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.663415][ T5848] team0: Port device team_slave_1 added [ 55.671739][ T5842] team0: Port device team_slave_0 added [ 55.683333][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.690368][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.716630][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.747456][ T5842] team0: Port device team_slave_1 added [ 55.759723][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.767191][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.794023][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.826040][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.833107][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.859498][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.878913][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.891342][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.916319][ T5841] hsr_slave_0: entered promiscuous mode [ 55.922746][ T5841] hsr_slave_1: entered promiscuous mode [ 55.929677][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.936768][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.963093][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.005654][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.012776][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.039098][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.051818][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.058776][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.084722][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.103654][ T5833] hsr_slave_0: entered promiscuous mode [ 56.109711][ T5833] hsr_slave_1: entered promiscuous mode [ 56.116182][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.124832][ T5833] Cannot create hsr debugfs directory [ 56.147004][ T5835] team0: Port device team_slave_0 added [ 56.154571][ T5835] team0: Port device team_slave_1 added [ 56.179249][ T5848] hsr_slave_0: entered promiscuous mode [ 56.185732][ T5848] hsr_slave_1: entered promiscuous mode [ 56.192727][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.200922][ T5848] Cannot create hsr debugfs directory [ 56.266465][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.273544][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.299930][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.319529][ T5842] hsr_slave_0: entered promiscuous mode [ 56.326881][ T5842] hsr_slave_1: entered promiscuous mode [ 56.333289][ T5846] Bluetooth: hci2: command tx timeout [ 56.333713][ T5851] Bluetooth: hci0: command tx timeout [ 56.344782][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.352603][ T5842] Cannot create hsr debugfs directory [ 56.361497][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.368448][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.394497][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.410714][ T5851] Bluetooth: hci3: command tx timeout [ 56.410833][ T5846] Bluetooth: hci1: command tx timeout [ 56.416238][ T5839] Bluetooth: hci4: command tx timeout [ 56.509686][ T5835] hsr_slave_0: entered promiscuous mode [ 56.516205][ T5835] hsr_slave_1: entered promiscuous mode [ 56.522846][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.530564][ T5835] Cannot create hsr debugfs directory [ 56.682809][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.707075][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.732085][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.766681][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.786786][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.813701][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.841279][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.850305][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.883118][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.903069][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.916510][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.932242][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.994047][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.022905][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.035472][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.044066][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.087155][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.106849][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.129482][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.150983][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.170826][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.179075][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.196295][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.207164][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.224567][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.231869][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.259007][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.266142][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.275786][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.282893][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.315175][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.322311][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.398507][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.412865][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.452582][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.475993][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.493641][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.534144][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.541298][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.563902][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 57.563916][ T29] audit: type=1400 audit(1732805371.654:111): avc: denied { sys_module } for pid=5841 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.565713][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.598276][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.639996][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.659017][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.666155][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.705820][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.713064][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.733682][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.753241][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.760415][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.786990][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.794128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.823847][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.875166][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.918736][ T5841] veth0_vlan: entered promiscuous mode [ 57.939088][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.985574][ T5841] veth1_vlan: entered promiscuous mode [ 58.019700][ T5848] veth0_vlan: entered promiscuous mode [ 58.049764][ T5848] veth1_vlan: entered promiscuous mode [ 58.083910][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.164803][ T5841] veth0_macvtap: entered promiscuous mode [ 58.184047][ T5841] veth1_macvtap: entered promiscuous mode [ 58.215172][ T5842] veth0_vlan: entered promiscuous mode [ 58.234311][ T5842] veth1_vlan: entered promiscuous mode [ 58.252361][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.262862][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.270559][ T5848] veth0_macvtap: entered promiscuous mode [ 58.310798][ T5848] veth1_macvtap: entered promiscuous mode [ 58.319114][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.337934][ T5842] veth0_macvtap: entered promiscuous mode [ 58.349385][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.372690][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.383037][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.392341][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.404950][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.415613][ T5839] Bluetooth: hci2: command tx timeout [ 58.423030][ T5851] Bluetooth: hci0: command tx timeout [ 58.431493][ T5842] veth1_macvtap: entered promiscuous mode [ 58.476011][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.486839][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.497035][ T5839] Bluetooth: hci1: command tx timeout [ 58.502577][ T5851] Bluetooth: hci4: command tx timeout [ 58.502587][ T5846] Bluetooth: hci3: command tx timeout [ 58.511247][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.546416][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.558302][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.569323][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.580626][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.592151][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.602347][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.613171][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.624234][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.645705][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.656548][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.667564][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.678265][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.689370][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.706179][ T5833] veth0_vlan: entered promiscuous mode [ 58.730855][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.739581][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750343][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.759047][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.778902][ T5833] veth1_vlan: entered promiscuous mode [ 58.788260][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.797578][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.806327][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.815734][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.847523][ T5835] veth0_vlan: entered promiscuous mode [ 58.869788][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.873600][ T5835] veth1_vlan: entered promiscuous mode [ 58.888347][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.909883][ T5833] veth0_macvtap: entered promiscuous mode [ 58.965651][ T5833] veth1_macvtap: entered promiscuous mode [ 59.002315][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.012645][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.038209][ T5835] veth0_macvtap: entered promiscuous mode [ 59.062495][ T29] audit: type=1400 audit(1732805373.154:112): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.uBTYQH/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.081312][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.091423][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.098968][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.113763][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.116805][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.132534][ T29] audit: type=1400 audit(1732805373.154:113): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.132570][ T29] audit: type=1400 audit(1732805373.154:114): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.uBTYQH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.132602][ T29] audit: type=1400 audit(1732805373.154:115): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.132634][ T29] audit: type=1400 audit(1732805373.154:116): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.uBTYQH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.132668][ T29] audit: type=1400 audit(1732805373.154:117): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/root/syzkaller.uBTYQH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.132703][ T29] audit: type=1400 audit(1732805373.204:118): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.276544][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.287289][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.298888][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.315276][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.320274][ T29] audit: type=1400 audit(1732805373.404:119): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.324962][ T5835] veth1_macvtap: entered promiscuous mode [ 59.356224][ T29] audit: type=1400 audit(1732805373.404:120): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.386702][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.396550][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.417672][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.419991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.432303][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.447929][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.458807][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.468731][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.479231][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490181][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.519779][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.528856][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.537995][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.546811][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.584716][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.595736][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.607574][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.619159][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.629467][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.646278][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.656764][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.668464][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.680807][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.693151][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.701602][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.720809][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.733263][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745384][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.759249][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.776820][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.788233][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806879][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.819199][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.831107][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.848059][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.869362][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.901300][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.911060][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.919920][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.935648][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.050332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.060192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.068466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.100217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.108624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.142009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.149824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.349479][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.357417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.374519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384617][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.430347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.440115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 60.448886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.455099][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.457690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.515939][ T5846] Bluetooth: hci2: command tx timeout [ 60.522362][ T5846] Bluetooth: hci0: command tx timeout [ 60.571978][ T5839] Bluetooth: hci3: command tx timeout [ 60.577580][ T5846] Bluetooth: hci1: command tx timeout [ 60.587237][ T5846] Bluetooth: hci4: command tx timeout [ 60.607919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.611169][ T5931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.570218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.800420][ T2153] ================================================================== [ 61.808509][ T2153] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 61.817714][ T2153] Read of size 8 at addr ffff8880798f5508 by task kworker/1:2/2153 [ 61.825601][ T2153] [ 61.827934][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 61.838344][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.848406][ T2153] Workqueue: events binder_deferred_func [ 61.854063][ T2153] Call Trace: [ 61.857320][ T2153] [ 61.860238][ T2153] dump_stack_lvl+0x116/0x1f0 [ 61.864934][ T2153] print_report+0xc3/0x620 [ 61.869354][ T2153] ? __virt_addr_valid+0x5e/0x590 [ 61.874361][ T2153] ? __phys_addr+0xc6/0x150 [ 61.878841][ T2153] kasan_report+0xd9/0x110 [ 61.883236][ T2153] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 61.889627][ T2153] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 61.896032][ T2153] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 61.902276][ T2153] binder_release_work+0x9b/0x490 [ 61.907301][ T2153] binder_deferred_func+0xe6e/0x12e0 [ 61.912583][ T2153] process_one_work+0x9c5/0x1ba0 [ 61.917510][ T2153] ? __pfx_defense_work_handler+0x10/0x10 [ 61.923222][ T2153] ? __pfx_process_one_work+0x10/0x10 [ 61.928581][ T2153] ? rcu_is_watching+0x12/0xc0 [ 61.933347][ T2153] ? assign_work+0x1a0/0x250 [ 61.937927][ T2153] worker_thread+0x6c8/0xf00 [ 61.942509][ T2153] ? __pfx_worker_thread+0x10/0x10 [ 61.947609][ T2153] kthread+0x2c1/0x3a0 [ 61.951669][ T2153] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.956861][ T2153] ? __pfx_kthread+0x10/0x10 [ 61.961443][ T2153] ret_from_fork+0x45/0x80 [ 61.965846][ T2153] ? __pfx_kthread+0x10/0x10 [ 61.970426][ T2153] ret_from_fork_asm+0x1a/0x30 [ 61.975188][ T2153] [ 61.978190][ T2153] [ 61.980494][ T2153] Allocated by task 5944: [ 61.984799][ T2153] kasan_save_stack+0x33/0x60 [ 61.989463][ T2153] kasan_save_track+0x14/0x30 [ 61.994127][ T2153] __kasan_kmalloc+0xaa/0xb0 [ 61.998701][ T2153] binder_thread_write+0xe18/0x4c70 [ 62.003897][ T2153] binder_ioctl+0x2669/0x6fd0 [ 62.008557][ T2153] __x64_sys_ioctl+0x190/0x200 [ 62.013315][ T2153] do_syscall_64+0xcd/0x250 [ 62.017813][ T2153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.023700][ T2153] [ 62.026005][ T2153] Freed by task 2153: [ 62.029965][ T2153] kasan_save_stack+0x33/0x60 [ 62.034632][ T2153] kasan_save_track+0x14/0x30 [ 62.039291][ T2153] kasan_save_free_info+0x3b/0x60 [ 62.044308][ T2153] __kasan_slab_free+0x51/0x70 [ 62.049059][ T2153] kfree+0x14f/0x4b0 [ 62.052939][ T2153] binder_deferred_func+0xdd7/0x12e0 [ 62.058216][ T2153] process_one_work+0x9c5/0x1ba0 [ 62.063143][ T2153] worker_thread+0x6c8/0xf00 [ 62.067716][ T2153] kthread+0x2c1/0x3a0 [ 62.071771][ T2153] ret_from_fork+0x45/0x80 [ 62.076172][ T2153] ret_from_fork_asm+0x1a/0x30 [ 62.080927][ T2153] [ 62.083234][ T2153] The buggy address belongs to the object at ffff8880798f5500 [ 62.083234][ T2153] which belongs to the cache kmalloc-64 of size 64 [ 62.097096][ T2153] The buggy address is located 8 bytes inside of [ 62.097096][ T2153] freed 64-byte region [ffff8880798f5500, ffff8880798f5540) [ 62.110619][ T2153] [ 62.112926][ T2153] The buggy address belongs to the physical page: [ 62.119323][ T2153] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x798f5 [ 62.128065][ T2153] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 62.135155][ T2153] page_type: f5(slab) [ 62.139120][ T2153] raw: 00fff00000000000 ffff88801b0418c0 dead000000000122 0000000000000000 [ 62.147688][ T2153] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 62.156247][ T2153] page dumped because: kasan: bad access detected [ 62.162648][ T2153] page_owner tracks the page as allocated [ 62.168339][ T2153] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5943, tgid 5943 (syz-executor), ts 60863822951, free_ts 58540469441 [ 62.187433][ T2153] post_alloc_hook+0x2d1/0x350 [ 62.192190][ T2153] get_page_from_freelist+0xfce/0x2f80 [ 62.197634][ T2153] __alloc_pages_noprof+0x223/0x25a0 [ 62.202904][ T2153] alloc_pages_mpol_noprof+0x2c9/0x610 [ 62.208355][ T2153] new_slab+0x2c9/0x410 [ 62.212495][ T2153] ___slab_alloc+0xdac/0x1870 [ 62.217156][ T2153] __slab_alloc.constprop.0+0x56/0xb0 [ 62.222512][ T2153] __kmalloc_noprof+0x2ec/0x510 [ 62.227349][ T2153] tomoyo_encode2+0x100/0x3e0 [ 62.232015][ T2153] tomoyo_encode+0x29/0x50 [ 62.236417][ T2153] tomoyo_path_perm+0x3a7/0x460 [ 62.241255][ T2153] tomoyo_path_symlink+0x98/0xe0 [ 62.246181][ T2153] security_path_symlink+0x152/0x2e0 [ 62.251459][ T2153] do_symlinkat+0x10e/0x310 [ 62.255951][ T2153] __x64_sys_symlinkat+0x93/0xc0 [ 62.260881][ T2153] do_syscall_64+0xcd/0x250 [ 62.265380][ T2153] page last free pid 5887 tgid 5887 stack trace: [ 62.271685][ T2153] free_unref_page+0x661/0x1080 [ 62.276520][ T2153] rcu_core+0x79d/0x14d0 [ 62.280751][ T2153] handle_softirqs+0x213/0x8f0 [ 62.285502][ T2153] __irq_exit_rcu+0x109/0x170 [ 62.290165][ T2153] irq_exit_rcu+0x9/0x30 [ 62.294395][ T2153] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 62.300015][ T2153] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.305989][ T2153] [ 62.308295][ T2153] Memory state around the buggy address: [ 62.313908][ T2153] ffff8880798f5400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 62.321952][ T2153] ffff8880798f5480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 62.329993][ T2153] >ffff8880798f5500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 62.338035][ T2153] ^ [ 62.342342][ T2153] ffff8880798f5580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 62.350384][ T2153] ffff8880798f5600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 62.358425][ T2153] ================================================================== [ 62.368637][ T2153] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.375844][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 62.386263][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.396323][ T2153] Workqueue: events binder_deferred_func [ 62.401974][ T2153] Call Trace: [ 62.405249][ T2153] [ 62.408175][ T2153] dump_stack_lvl+0x3d/0x1f0 [ 62.412782][ T2153] panic+0x71d/0x800 [ 62.416689][ T2153] ? __pfx_panic+0x10/0x10 [ 62.421124][ T2153] ? check_panic_on_warn+0x1f/0xb0 [ 62.426234][ T2153] check_panic_on_warn+0xab/0xb0 [ 62.431170][ T2153] end_report+0x117/0x180 [ 62.435500][ T2153] kasan_report+0xe9/0x110 [ 62.439916][ T2153] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 62.446332][ T2153] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 62.452756][ T2153] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 62.459000][ T2153] binder_release_work+0x9b/0x490 [ 62.464037][ T2153] binder_deferred_func+0xe6e/0x12e0 [ 62.469342][ T2153] process_one_work+0x9c5/0x1ba0 [ 62.474286][ T2153] ? __pfx_defense_work_handler+0x10/0x10 [ 62.480012][ T2153] ? __pfx_process_one_work+0x10/0x10 [ 62.485384][ T2153] ? rcu_is_watching+0x12/0xc0 [ 62.490156][ T2153] ? assign_work+0x1a0/0x250 [ 62.494747][ T2153] worker_thread+0x6c8/0xf00 [ 62.499345][ T2153] ? __pfx_worker_thread+0x10/0x10 [ 62.504456][ T2153] kthread+0x2c1/0x3a0 [ 62.508527][ T2153] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.513727][ T2153] ? __pfx_kthread+0x10/0x10 [ 62.518322][ T2153] ret_from_fork+0x45/0x80 [ 62.522740][ T2153] ? __pfx_kthread+0x10/0x10 [ 62.527338][ T2153] ret_from_fork_asm+0x1a/0x30 [ 62.532117][ T2153] [ 62.535240][ T2153] Kernel Offset: disabled [ 62.539541][ T2153] Rebooting in 86400 seconds..