last executing test programs: 14.825372282s ago: executing program 1 (id=65): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24048810}, 0x4) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') writev(r8, &(0x7f0000000440)=[{&(0x7f0000000180)='P', 0x1}, {0x0}, {&(0x7f0000000040)="0b75e8c4ad1e0e7c278d128b29db5152232c340f07e1d410754262d3804cf40dfa3b837df6273fe9ab2558c358cd31d3bf086f9aadd6bddbe5abca186ed0d04953502174b25f0fd7e8f697938b79ceaa4f265642306cd68c7e057362a46ba8726434f32852ce88e00e3804ca110f3353780c6821c400c4523abe065b2f3492efb1451578a47620dc1cc4f79f7af2a5409a59553ddc4e125d47f59a2e152b33f566b5bf504b702e69463861fb26811461fedd682aa202a798", 0xb8}, {&(0x7f00000001c0)="f37577afe46a97fdb2b24eba8de04d0209cbbf1362fd44a008a264", 0x1b}, {&(0x7f00000004c0)="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", 0x20c}, {&(0x7f0000000340)="e19dee4d106964e62bf227542e07e4c38a1787320c5bf5c39ac8ac8a277811feaf135e90c0cc07ee039c3aa3ded7a1e50698389e33f5dcf54073f71640e94f01cbc8b353d0cf2db8af13f6bb3b9a4da8576f6565daa80655ef9be1a72022bc7a23d275d49f47f0f1d1", 0x69}, {&(0x7f00000003c0)="e54bc8009d453a51d1db8101ea8c3485c9736411e9ef05825b6aa2fdfa", 0x1d}], 0x7) 9.66984025s ago: executing program 2 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) 8.582711945s ago: executing program 1 (id=76): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210300000000000000003200000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 7.891798065s ago: executing program 3 (id=77): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.826405668s ago: executing program 1 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r4, 0x0, 0x11, 0x0) 6.512214391s ago: executing program 3 (id=80): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x141301) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_open(&(0x7f0000000e80)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x03\x00\xd2\xba\x11\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DUc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x2de0, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x1000224}, 0x0, 0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r0, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 5.735337765s ago: executing program 4 (id=82): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000206050000000000000000000500000005000100070000000900020073797a3000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 5.734319959s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, 0x0, 0x0) 5.169834721s ago: executing program 4 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) init_module(&(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46022c0704090000000000000001003e000900000083000000000000004000000000000000ba0300000000000007000000030038000100010403000700000000600300000041f8000000000000fbffffffbfffffff7f0000000000000008000000000000000300000000000000c50400000000000024eb4eac75746856bf6ec924a5ac0ba7e99da40b2a32fad8121ba43831a44f5be7e6b2222dfb566ebd2fda9b221a03868ba8dbb302ea5ff26a5d4ff259a39680692571e15348f81ad7b3ecdf600053663bceee65fecfdcbc9a40351e6e5b18d7"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) ustat(0xfffffffffffffffd, &(0x7f0000000240)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) preadv(r5, &(0x7f0000001d80)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, 0x9, 0x2) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0xa, &(0x7f0000000640), 0x0) 4.098713127s ago: executing program 3 (id=86): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x109502, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) close(r0) 4.046463885s ago: executing program 4 (id=87): io_submit(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004f84dc103"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 3.928880961s ago: executing program 4 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}]]}, 0x38}}, 0x0) 3.903291926s ago: executing program 0 (id=89): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210300000000000000003200000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 3.750846568s ago: executing program 2 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.66272312s ago: executing program 4 (id=91): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') writev(r6, &(0x7f0000000440)=[{&(0x7f0000000180)='P', 0x1}, {0x0}, {&(0x7f0000000040)="0b75e8c4ad1e0e7c278d128b29db5152232c340f07e1d410754262d3804cf40dfa3b837df6273fe9ab2558c358cd31d3bf086f9aadd6bddbe5abca186ed0d04953502174b25f0fd7e8f697938b79ceaa4f265642306cd68c7e057362a46ba8726434f32852ce88e00e3804ca110f3353780c6821c400c4523abe065b2f3492efb1451578a47620dc1cc4f79f7af2a5409a59553ddc4e125d47f59a2e152b33f566b5bf504b702e69463861fb26811461fedd682aa202a798", 0xb8}, {&(0x7f00000001c0)="f37577afe46a97fdb2b24eba8de04d0209cbbf1362fd44a008a264", 0x1b}, {&(0x7f00000004c0)="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", 0x20c}, {&(0x7f0000000340)="e19dee4d106964e62bf227542e07e4c38a1787320c5bf5c39ac8ac8a277811feaf135e90c0cc07ee039c3aa3ded7a1e50698389e33f5dcf54073f71640e94f01cbc8b353d0cf2db8af13f6bb3b9a4da8576f6565daa80655ef9be1a72022bc7a23d275d49f47f0f1d1", 0x69}, {&(0x7f00000003c0)="e54bc8009d453a51d1db8101ea8c3485c9736411e9ef05825b6aa2fdfa", 0x1d}], 0x7) 2.904643076s ago: executing program 3 (id=92): recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d80)=""/4098, 0x1002}], 0x1}, 0x7}], 0x1, 0x120, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.903722025s ago: executing program 0 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x30, r1, 0x101, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x30}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8e}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.837562534s ago: executing program 2 (id=94): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x88901, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.657275499s ago: executing program 0 (id=95): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local, 0x4}, 0x10) 2.653806734s ago: executing program 1 (id=96): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.53859447s ago: executing program 2 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000001c0)=r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x4, 0x8d64, 0x2, 0x9f99}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.24559446s ago: executing program 0 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040880) 1.314641281s ago: executing program 1 (id=99): io_submit(0x0, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004f84dc103"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 1.313052675s ago: executing program 2 (id=100): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r0, &(0x7f0000000480)=""/243, 0xf3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7c0000007d01000000630000000900000000010000000300000000000000000015290b000000ff07000000000000000000000300237d5d010026280073797374656d5f753a6f626a6563745f723a72656d6f7661626c655f646576696365d952bbd58141e8feb15b296fc49a5f743a7330000400235b212f040047504c00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r4], 0x7c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000003c0)={0x0, 0x1, {0x2, 0x0, 0x9, 0x2, 0xb3}, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 1.202076349s ago: executing program 4 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) 1.174020327s ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000b12000/0x2000)=nil, 0x2000, 0x2000003, 0x30, 0xffffffffffffffff, 0x3e1c5000) userfaultfd(0x80001) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000616263646566676a696a6b6c6d6e6f70"], 0x18, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x100004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="79610000000000c43700000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) 1.08611716s ago: executing program 1 (id=103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x6, {0x6, 0x0, "5a7da329"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 289.687704ms ago: executing program 2 (id=104): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) 262.216851ms ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='ntfs3\x00', 0x8000, 0x0) 0s ago: executing program 0 (id=106): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/168, 0xa8}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 64.183233][ T30] audit: type=1400 audit(1753818557.666:62): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.186888][ T5816] cgroup: Unknown subsys name 'net' [ 64.206031][ T30] audit: type=1400 audit(1753818557.666:63): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.235973][ T30] audit: type=1400 audit(1753818557.726:64): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.420288][ T5816] cgroup: Unknown subsys name 'cpuset' [ 64.428477][ T5816] cgroup: Unknown subsys name 'rlimit' [ 64.575077][ T30] audit: type=1400 audit(1753818558.056:65): avc: denied { setattr } for pid=5816 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.598401][ T30] audit: type=1400 audit(1753818558.056:66): avc: denied { create } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.633939][ T30] audit: type=1400 audit(1753818558.056:67): avc: denied { write } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.654512][ T30] audit: type=1400 audit(1753818558.056:68): avc: denied { read } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.674899][ T30] audit: type=1400 audit(1753818558.086:69): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.701305][ T30] audit: type=1400 audit(1753818558.086:70): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.724837][ T30] audit: type=1400 audit(1753818558.106:71): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.747472][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.677126][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.292026][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 69.292048][ T30] audit: type=1400 audit(1753818562.776:78): avc: denied { create } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.336931][ T30] audit: type=1400 audit(1753818562.806:79): avc: denied { read write } for pid=5826 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.369408][ T30] audit: type=1400 audit(1753818562.806:80): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.393141][ T30] audit: type=1400 audit(1753818562.816:81): avc: denied { ioctl } for pid=5827 comm="syz-executor" path="socket:[3683]" dev="sockfs" ino=3683 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.453020][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.461037][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.469813][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.476512][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.478187][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.492669][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.493255][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.500731][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.508184][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.514567][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.529053][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.537471][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.537919][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.545644][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.559964][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.564268][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.568191][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.577290][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.581312][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.595968][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.604487][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.608029][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.611921][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.621047][ T30] audit: type=1400 audit(1753818563.076:82): avc: denied { read } for pid=5830 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.627409][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.657987][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.704453][ T30] audit: type=1400 audit(1753818563.076:83): avc: denied { open } for pid=5830 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.733215][ T30] audit: type=1400 audit(1753818563.076:84): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.008250][ T30] audit: type=1400 audit(1753818563.486:85): avc: denied { module_request } for pid=5830 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.170080][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.211854][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 70.255494][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.281066][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.348846][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.462708][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.472214][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.479835][ T5830] bridge_slave_0: entered allmulticast mode [ 70.487170][ T5830] bridge_slave_0: entered promiscuous mode [ 70.496416][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.503583][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.511029][ T5830] bridge_slave_1: entered allmulticast mode [ 70.517988][ T5830] bridge_slave_1: entered promiscuous mode [ 70.524859][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.532085][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.539296][ T5826] bridge_slave_0: entered allmulticast mode [ 70.545917][ T5826] bridge_slave_0: entered promiscuous mode [ 70.578307][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.585438][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.592949][ T5826] bridge_slave_1: entered allmulticast mode [ 70.599875][ T5826] bridge_slave_1: entered promiscuous mode [ 70.651191][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.658665][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.665777][ T5828] bridge_slave_0: entered allmulticast mode [ 70.673356][ T5828] bridge_slave_0: entered promiscuous mode [ 70.680332][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.687421][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.695871][ T5827] bridge_slave_0: entered allmulticast mode [ 70.702678][ T5827] bridge_slave_0: entered promiscuous mode [ 70.710935][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.718186][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.725408][ T5827] bridge_slave_1: entered allmulticast mode [ 70.732241][ T5827] bridge_slave_1: entered promiscuous mode [ 70.740794][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.752489][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.777429][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.784645][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.791911][ T5828] bridge_slave_1: entered allmulticast mode [ 70.798957][ T5828] bridge_slave_1: entered promiscuous mode [ 70.833941][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.843322][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.851008][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.858392][ T5829] bridge_slave_0: entered allmulticast mode [ 70.865129][ T5829] bridge_slave_0: entered promiscuous mode [ 70.889190][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.901323][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.918669][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.937367][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.945623][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.953263][ T5829] bridge_slave_1: entered allmulticast mode [ 70.959947][ T5829] bridge_slave_1: entered promiscuous mode [ 70.969768][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.988861][ T5830] team0: Port device team_slave_0 added [ 71.020218][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.047498][ T5830] team0: Port device team_slave_1 added [ 71.055410][ T5826] team0: Port device team_slave_0 added [ 71.063930][ T5826] team0: Port device team_slave_1 added [ 71.071490][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.095077][ T5827] team0: Port device team_slave_0 added [ 71.117437][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.140024][ T5828] team0: Port device team_slave_0 added [ 71.147052][ T5827] team0: Port device team_slave_1 added [ 71.186149][ T5828] team0: Port device team_slave_1 added [ 71.203160][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209788][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.226924][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.233924][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.259862][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.272192][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.279603][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.305644][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.319723][ T5829] team0: Port device team_slave_0 added [ 71.332990][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.340292][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.367165][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.380205][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.387156][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.413357][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.424686][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.431678][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.457930][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.474752][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.481819][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.507800][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.539014][ T5829] team0: Port device team_slave_1 added [ 71.545260][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.552453][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.580503][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.596432][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.603544][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.629552][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.676165][ T5826] hsr_slave_0: entered promiscuous mode [ 71.682574][ T5844] Bluetooth: hci3: command tx timeout [ 71.682578][ T5153] Bluetooth: hci4: command tx timeout [ 71.683612][ T5826] hsr_slave_1: entered promiscuous mode [ 71.692195][ T5153] Bluetooth: hci1: command tx timeout [ 71.715880][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.723170][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.749706][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.761072][ T5153] Bluetooth: hci2: command tx timeout [ 71.761078][ T5844] Bluetooth: hci0: command tx timeout [ 71.815853][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.823035][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.849177][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.871454][ T5830] hsr_slave_0: entered promiscuous mode [ 71.877518][ T5830] hsr_slave_1: entered promiscuous mode [ 71.883862][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.889748][ T5830] Cannot create hsr debugfs directory [ 71.903970][ T5827] hsr_slave_0: entered promiscuous mode [ 71.910537][ T5827] hsr_slave_1: entered promiscuous mode [ 71.916371][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.922397][ T5827] Cannot create hsr debugfs directory [ 71.936145][ T5828] hsr_slave_0: entered promiscuous mode [ 71.942379][ T5828] hsr_slave_1: entered promiscuous mode [ 71.948496][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.954223][ T5828] Cannot create hsr debugfs directory [ 72.084167][ T5829] hsr_slave_0: entered promiscuous mode [ 72.090419][ T5829] hsr_slave_1: entered promiscuous mode [ 72.096261][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.102507][ T5829] Cannot create hsr debugfs directory [ 72.373482][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.385047][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.405229][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.422228][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.464058][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.475258][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.495786][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.506679][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.547468][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.571792][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.593878][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.604564][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.662078][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.694853][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.704278][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.715584][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.742171][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.795006][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.806262][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.816934][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.848527][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.860575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.867869][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.885129][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.892873][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.909400][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.916498][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.968778][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.999388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.006477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.042666][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.071116][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078281][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.127362][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.157541][ T30] audit: type=1400 audit(1753818566.636:86): avc: denied { sys_module } for pid=5826 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.211586][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.227561][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.245619][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.252772][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.280808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.287992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.353919][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.376577][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.403451][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.410640][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.432380][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.458435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.465565][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.534797][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.554580][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.569863][ T5826] veth0_vlan: entered promiscuous mode [ 73.607053][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.652200][ T5826] veth1_vlan: entered promiscuous mode [ 73.674831][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.681984][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.750899][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.758589][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.766432][ T5153] Bluetooth: hci4: command tx timeout [ 73.766444][ T5844] Bluetooth: hci3: command tx timeout [ 73.772411][ T5839] Bluetooth: hci1: command tx timeout [ 73.840766][ T5153] Bluetooth: hci0: command tx timeout [ 73.846405][ T5839] Bluetooth: hci2: command tx timeout [ 73.869485][ T5828] veth0_vlan: entered promiscuous mode [ 73.877262][ T5826] veth0_macvtap: entered promiscuous mode [ 73.890013][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.900917][ T5828] veth1_vlan: entered promiscuous mode [ 73.913380][ T5826] veth1_macvtap: entered promiscuous mode [ 73.954022][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.984577][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.045950][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.067574][ T5829] veth0_vlan: entered promiscuous mode [ 74.102639][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112904][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125374][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.134899][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.165817][ T5828] veth0_macvtap: entered promiscuous mode [ 74.203189][ T5828] veth1_macvtap: entered promiscuous mode [ 74.235172][ T5829] veth1_vlan: entered promiscuous mode [ 74.314886][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.325977][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.355436][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.364494][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.374980][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.383770][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416950][ T5829] veth0_macvtap: entered promiscuous mode [ 74.432577][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.438731][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.451798][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.456160][ T5829] veth1_macvtap: entered promiscuous mode [ 74.486725][ T5827] veth0_vlan: entered promiscuous mode [ 74.516499][ T5827] veth1_vlan: entered promiscuous mode [ 74.531613][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.541383][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.549748][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.583555][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.593884][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603092][ T30] audit: type=1400 audit(1753818568.076:87): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.yLf5BB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.617319][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628508][ T30] audit: type=1400 audit(1753818568.076:88): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.640762][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.660990][ T30] audit: type=1400 audit(1753818568.076:89): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.yLf5BB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.666864][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.701027][ T30] audit: type=1400 audit(1753818568.086:90): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.724102][ T30] audit: type=1400 audit(1753818568.096:91): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.yLf5BB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.755046][ T30] audit: type=1400 audit(1753818568.096:92): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.yLf5BB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.790640][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.797472][ T5830] veth0_vlan: entered promiscuous mode [ 74.823747][ T5827] veth0_macvtap: entered promiscuous mode [ 74.843476][ T30] audit: type=1400 audit(1753818568.096:93): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.866710][ T30] audit: type=1400 audit(1753818568.186:94): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.903673][ T5830] veth1_vlan: entered promiscuous mode [ 74.911839][ T30] audit: type=1400 audit(1753818568.186:95): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=6009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.916521][ T5827] veth1_macvtap: entered promiscuous mode [ 74.940774][ T30] audit: type=1400 audit(1753818568.196:96): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.990495][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.102737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.143658][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.162231][ T5830] veth0_macvtap: entered promiscuous mode [ 75.207549][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.232843][ T5830] veth1_macvtap: entered promiscuous mode [ 75.275235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.285872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.328327][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.338075][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.346976][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356775][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404898][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.413888][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.433602][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.492237][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.590149][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.610785][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.621282][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630223][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.651858][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.673277][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.838692][ T5839] Bluetooth: hci1: command tx timeout [ 75.844141][ T5839] Bluetooth: hci4: command tx timeout [ 75.850802][ T5153] Bluetooth: hci3: command tx timeout [ 75.887470][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.905624][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.928101][ T5839] Bluetooth: hci2: command tx timeout [ 75.933549][ T5839] Bluetooth: hci0: command tx timeout [ 76.122645][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.136930][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.157987][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.371998][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.407816][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.586444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.635450][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.847929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.967929][ T5997] Bluetooth: MGMT ver 1.23 [ 77.975040][ T5839] Bluetooth: hci4: command tx timeout [ 77.981169][ T5839] Bluetooth: hci1: command tx timeout [ 77.987032][ T5839] Bluetooth: hci3: command tx timeout [ 78.049210][ T50] Bluetooth: hci2: command tx timeout [ 78.054858][ T5845] Bluetooth: hci0: command tx timeout [ 78.161678][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805938d000: rx timeout, send abort [ 78.171359][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805938d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.200259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.215672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.243666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.260128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.271477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.281585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.292718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.307148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 78.317687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.148186][ T5839] Bluetooth: Wrong link type (-71) [ 80.167090][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 80.167108][ T30] audit: type=1400 audit(1753818573.646:153): avc: denied { create } for pid=6027 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.240278][ T6036] netlink: 27 bytes leftover after parsing attributes in process `syz.4.29'. [ 80.300342][ T30] audit: type=1400 audit(1753818573.646:154): avc: denied { bind } for pid=6027 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.382928][ T30] audit: type=1400 audit(1753818573.676:155): avc: denied { setopt } for pid=6027 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.411885][ T6038] GUP no longer grows the stack in syz.3.31 (6038): 200000004000-20000000a000 (200000002000) [ 80.446597][ T30] audit: type=1400 audit(1753818573.676:156): avc: denied { accept } for pid=6027 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.487188][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.31 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 80.487218][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.487229][ T6038] Call Trace: [ 80.487235][ T6038] [ 80.487243][ T6038] dump_stack_lvl+0x16c/0x1f0 [ 80.487271][ T6038] gup_vma_lookup+0x1d2/0x220 [ 80.487297][ T6038] __get_user_pages+0x271/0x3b80 [ 80.487333][ T6038] ? __pfx___get_user_pages+0x10/0x10 [ 80.487363][ T6038] get_user_pages_remote+0x258/0xb20 [ 80.487385][ T6038] ? __pfx_mtree_load+0x10/0x10 [ 80.487406][ T6038] ? __pfx_get_user_pages_remote+0x10/0x10 [ 80.487436][ T6038] __access_remote_vm+0x246/0x810 [ 80.487460][ T6038] ? do_raw_spin_lock+0x12c/0x2b0 [ 80.487494][ T6038] ? __pfx___access_remote_vm+0x10/0x10 [ 80.487523][ T6038] proc_pid_cmdline_read+0x4de/0x900 [ 80.487547][ T6038] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 80.487565][ T6038] ? rw_verify_area+0xcf/0x680 [ 80.487590][ T6038] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 80.487605][ T6038] vfs_readv+0x5be/0x8b0 [ 80.487636][ T6038] ? __pfx_vfs_readv+0x10/0x10 [ 80.487664][ T6038] ? kmem_cache_free+0x2d1/0x4d0 [ 80.487707][ T6038] ? __fget_files+0x20e/0x3c0 [ 80.487731][ T6038] ? do_preadv+0x1a6/0x270 [ 80.487756][ T6038] do_preadv+0x1a6/0x270 [ 80.487780][ T6038] ? __pfx_do_preadv+0x10/0x10 [ 80.487810][ T6038] do_syscall_64+0xcd/0x4c0 [ 80.487834][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.487853][ T6038] RIP: 0033:0x7ff90678e9a9 [ 80.487869][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.487886][ T6038] RSP: 002b:00007ff90756d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 80.487904][ T6038] RAX: ffffffffffffffda RBX: 00007ff9069b5fa0 RCX: 00007ff90678e9a9 [ 80.487915][ T6038] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 80.487926][ T6038] RBP: 00007ff906810d69 R08: 0000000000000000 R09: 0000000000000000 [ 80.487936][ T6038] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 80.487947][ T6038] R13: 0000000000000000 R14: 00007ff9069b5fa0 R15: 00007ffceb338198 [ 80.487968][ T6038] [ 80.500687][ T30] audit: type=1400 audit(1753818573.676:157): avc: denied { write } for pid=6027 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.022422][ T30] audit: type=1400 audit(1753818574.496:158): avc: denied { create } for pid=6046 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.048061][ T6047] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.067319][ T30] audit: type=1400 audit(1753818574.506:159): avc: denied { append } for pid=6048 comm="syz.4.34" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.104580][ T30] audit: type=1400 audit(1753818574.536:160): avc: denied { ioctl } for pid=6046 comm="syz.1.33" path="socket:[7842]" dev="sockfs" ino=7842 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.135204][ T6053] ubi31: attaching mtd0 [ 81.141619][ T6053] ubi31: scanning is finished [ 81.146334][ T6053] ubi31: empty MTD device detected [ 81.173025][ T30] audit: type=1400 audit(1753818574.616:161): avc: denied { create } for pid=6048 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.203195][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.267891][ T6053] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 81.275609][ T6053] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 81.283343][ T6053] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 81.290473][ T6053] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 81.298160][ T6053] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 81.305051][ T6053] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 81.313180][ T6053] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1452974406 [ 81.323628][ T6053] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 81.340396][ T6058] ubi31: background thread "ubi_bgt31d" started, PID 6058 [ 81.347667][ T30] audit: type=1400 audit(1753818574.616:162): avc: denied { write } for pid=6048 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.457359][ T9] cfg80211: failed to load regulatory.db [ 81.576597][ T6066] Invalid ELF section header size [ 84.948128][ T1205] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.217389][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 85.217435][ T30] audit: type=1400 audit(1753818578.696:182): avc: denied { ioctl } for pid=6096 comm="syz.1.49" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7927 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.692558][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 85.998329][ T30] audit: type=1400 audit(1753818579.106:183): avc: denied { write } for pid=6099 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.020346][ T1205] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 86.037807][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.102832][ T1205] usb 4-1: config 0 descriptor?? [ 86.150568][ T6116] netlink: 27 bytes leftover after parsing attributes in process `syz.2.55'. [ 86.255449][ T1205] usb 4-1: selecting invalid altsetting 1 [ 86.894283][ T1205] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 86.920634][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.954284][ T1205] usb 4-1: USB disconnect, device number 2 [ 87.055786][ T30] audit: type=1400 audit(1753818580.536:184): avc: denied { create } for pid=6127 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.132349][ T30] audit: type=1400 audit(1753818580.566:185): avc: denied { read } for pid=6127 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.156060][ T30] audit: type=1400 audit(1753818580.636:186): avc: denied { setopt } for pid=6127 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.196195][ T30] audit: type=1400 audit(1753818580.636:187): avc: denied { write } for pid=6127 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.386155][ T30] audit: type=1400 audit(1753818580.826:188): avc: denied { ioctl } for pid=6127 comm="syz.4.58" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaed5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.225281][ T30] audit: type=1400 audit(1753818581.686:189): avc: denied { create } for pid=6135 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.368930][ T30] audit: type=1400 audit(1753818581.686:190): avc: denied { connect } for pid=6135 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.457315][ T3496] tipc: Subscription rejected, illegal request [ 88.472057][ T30] audit: type=1400 audit(1753818581.696:191): avc: denied { write } for pid=6135 comm="syz.2.60" path="socket:[7967]" dev="sockfs" ino=7967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.851123][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 91.851140][ T30] audit: type=1400 audit(1753818582.986:199): avc: denied { ioctl } for pid=6144 comm="syz.3.62" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.041678][ T30] audit: type=1400 audit(1753818585.516:200): avc: denied { bind } for pid=6155 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.255186][ T30] audit: type=1400 audit(1753818585.516:201): avc: denied { name_bind } for pid=6155 comm="syz.4.67" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.558180][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.720631][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.729034][ T30] audit: type=1400 audit(1753818585.516:202): avc: denied { node_bind } for pid=6155 comm="syz.4.67" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 92.750133][ T30] audit: type=1400 audit(1753818585.556:203): avc: denied { create } for pid=6157 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.776213][ T30] audit: type=1400 audit(1753818585.746:204): avc: denied { write } for pid=6155 comm="syz.4.67" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.780984][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.813285][ T30] audit: type=1400 audit(1753818585.746:205): avc: denied { connect } for pid=6155 comm="syz.4.67" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.853355][ T30] audit: type=1400 audit(1753818585.746:206): avc: denied { name_connect } for pid=6155 comm="syz.4.67" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.854587][ T5906] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 92.941781][ T5880] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 92.956787][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.988669][ T5906] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 92.998858][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.009564][ T30] audit: type=1400 audit(1753818585.776:207): avc: denied { setopt } for pid=6157 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.167933][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.216981][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.245215][ T5880] usb 2-1: config 0 descriptor?? [ 93.255321][ T5880] usb 2-1: selecting invalid altsetting 1 [ 93.273451][ T30] audit: type=1400 audit(1753818586.756:208): avc: denied { create } for pid=6171 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.285045][ T5906] usb 4-1: Manufacturer: 鶬ꁆ⢡닕槞뒁鳴廬鮈孕푶鬱酭䭧贽ଓ鈷旲࿑틢⿏ी顛疰迫逘﹁ιቺᯅ負뮱㹑削堂껻귃矡➼蟴ﰪޞ힘勉겫Ꮐ葡䋘ꙶ슪襢燝綔ﻐ玥苙㕓␱韦孙빛좟塬ᕚ膚翻礍 [ 93.378631][ T6175] overlayfs: failed to resolve './file0': -2 [ 93.435201][ T6176] overlayfs: missing 'lowerdir' [ 93.676634][ T5880] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 93.830962][ T6179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6179 comm=syz.1.65 [ 94.342236][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.384207][ T5906] usb 4-1: 0:2 : does not exist [ 94.481809][ T5906] usb 4-1: USB disconnect, device number 3 [ 94.827894][ T5880] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.066286][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.153547][ T5880] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 95.165213][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.176565][ T5880] usb 1-1: config 0 descriptor?? [ 95.263052][ T5880] usb 1-1: selecting invalid altsetting 1 [ 95.307583][ T5880] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 95.333932][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.404331][ T1205] usb 2-1: USB disconnect, device number 2 [ 98.057895][ T5906] usb 1-1: USB disconnect, device number 2 [ 98.441599][ T6218] Zero length message leads to an empty skb [ 98.971902][ T6221] Invalid ELF section header size [ 99.175523][ T6224] tipc: Started in network mode [ 99.211022][ T6224] tipc: Node identity b21db8628ca, cluster identity 4711 [ 99.233615][ T6224] tipc: Enabled bearer , priority 0 [ 99.255573][ T6230] syzkaller0: entered promiscuous mode [ 99.269641][ T6230] syzkaller0: entered allmulticast mode [ 99.304023][ T6223] tipc: Resetting bearer [ 99.383053][ T6232] overlayfs: failed to resolve './file0': -2 [ 99.439222][ T6233] overlayfs: missing 'lowerdir' [ 99.898625][ T6223] tipc: Disabling bearer [ 101.310539][ T6259] misc userio: Invalid payload size [ 101.907945][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 101.907967][ T30] audit: type=1400 audit(1753818595.246:220): avc: denied { bind } for pid=6268 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.650920][ T30] audit: type=1400 audit(1753818595.246:221): avc: denied { node_bind } for pid=6268 comm="syz.2.97" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.723289][ T30] audit: type=1400 audit(1753818595.246:222): avc: denied { write } for pid=6268 comm="syz.2.97" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.746842][ T30] audit: type=1400 audit(1753818595.506:223): avc: denied { create } for pid=6266 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.998366][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805ae5fc00: rx timeout, send abort [ 103.007027][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805ae5fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.543249][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 103.577956][ T1205] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.594240][ T6293] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.603313][ T6293] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.612073][ T6293] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.620782][ T6293] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.631641][ T6293] vxlan0: entered promiscuous mode [ 104.065771][ T30] audit: type=1400 audit(1753818597.546:224): avc: denied { read write } for pid=6296 comm="syz.3.105" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.092428][ T6299] ------------[ cut here ]------------ [ 104.098620][ T6299] kernel BUG at fs/buffer.c:1582! [ 104.165003][ T6299] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 104.165203][ T30] audit: type=1400 audit(1753818597.546:225): avc: denied { ioctl open } for pid=6296 comm="syz.3.105" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.171455][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.3.105 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 104.171480][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.171491][ T6299] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 104.171516][ T6299] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 104.218942][ T1205] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.221693][ T6299] RSP: 0018:ffffc9000c0178d8 EFLAGS: 00010287 [ 104.257791][ T1205] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.258725][ T6299] RAX: 0000000000001fed RBX: ffffea00016b4a00 RCX: ffffc9000d61a000 [ 104.276465][ T6299] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 104.284448][ T6299] RBP: ffff8880241059f8 R08: 0000000000000006 R09: 0000000000004000 [ 104.292408][ T6299] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 104.300364][ T6299] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 104.308319][ T6299] FS: 00007ff90756d6c0(0000) GS:ffff8881247f9000(0000) knlGS:0000000000000000 [ 104.317240][ T6299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.323808][ T6299] CR2: 00007fef1902fd58 CR3: 00000000345c4000 CR4: 00000000003526f0 [ 104.331764][ T6299] Call Trace: [ 104.335024][ T6299] [ 104.337939][ T6299] folio_alloc_buffers+0x295/0x6c0 [ 104.343043][ T6299] __getblk_slow+0x1f4/0x560 [ 104.347622][ T6299] bdev_getblk+0xd4/0xe0 [ 104.351856][ T6299] __bread_gfp+0x86/0x3c0 [ 104.356171][ T6299] ntfs_bread+0xd9/0x210 [ 104.360420][ T6299] ntfs_fill_super+0x64f/0x4270 [ 104.365258][ T6299] ? __pfx_vsnprintf+0x10/0x10 [ 104.370011][ T6299] ? snprintf+0xc7/0x100 [ 104.374240][ T6299] ? __pfx_snprintf+0x10/0x10 [ 104.378901][ T6299] ? __pfx_ntfs_fill_super+0x10/0x10 [ 104.384173][ T6299] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.389186][ T6299] ? find_held_lock+0x2b/0x80 [ 104.393854][ T6299] ? sb_set_blocksize+0x188/0x1d0 [ 104.398867][ T6299] ? setup_bdev_super+0x369/0x730 [ 104.403881][ T6299] get_tree_bdev_flags+0x389/0x620 [ 104.408979][ T6299] ? __pfx_ntfs_fill_super+0x10/0x10 [ 104.414246][ T6299] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 104.419859][ T6299] ? bpf_lsm_capable+0x9/0x10 [ 104.424523][ T6299] ? security_capable+0x7e/0x260 [ 104.429465][ T6299] vfs_get_tree+0x8e/0x340 [ 104.433869][ T6299] path_mount+0x1482/0x1fd0 [ 104.438359][ T6299] ? __pfx_path_mount+0x10/0x10 [ 104.443192][ T6299] ? kmem_cache_free+0x2d1/0x4d0 [ 104.448121][ T6299] ? putname+0x154/0x1a0 [ 104.452353][ T6299] ? putname+0x154/0x1a0 [ 104.456581][ T6299] ? __x64_sys_mount+0x28d/0x310 [ 104.461506][ T6299] __x64_sys_mount+0x28d/0x310 [ 104.466256][ T6299] ? __pfx___x64_sys_mount+0x10/0x10 [ 104.471527][ T6299] do_syscall_64+0xcd/0x4c0 [ 104.476019][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.481898][ T6299] RIP: 0033:0x7ff90678e9a9 [ 104.486306][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.505908][ T6299] RSP: 002b:00007ff90756d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.514324][ T6299] RAX: ffffffffffffffda RBX: 00007ff9069b5fa0 RCX: 00007ff90678e9a9 [ 104.522279][ T6299] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 104.530233][ T6299] RBP: 00007ff906810d69 R08: 0000000000000000 R09: 0000000000000000 [ 104.538184][ T6299] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 104.546135][ T6299] R13: 0000000000000000 R14: 00007ff9069b5fa0 R15: 00007ffceb338198 [ 104.554095][ T6299] [ 104.557097][ T6299] Modules linked in: [ 104.562653][ T6299] ---[ end trace 0000000000000000 ]--- [ 104.568291][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.568325][ T1205] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 104.568344][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.594479][ T1205] usb 2-1: config 0 descriptor?? [ 104.608218][ T30] audit: type=1400 audit(1753818598.096:226): avc: denied { create } for pid=6301 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.618343][ T6299] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 104.633799][ T6299] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 104.654518][ T6299] RSP: 0018:ffffc9000c0178d8 EFLAGS: 00010287 [ 104.661300][ T6299] RAX: 0000000000001fed RBX: ffffea00016b4a00 RCX: ffffc9000d61a000 [ 104.677901][ T6299] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 104.686448][ T6299] RBP: ffff8880241059f8 R08: 0000000000000006 R09: 0000000000004000 [ 104.698050][ T6299] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 104.707023][ T6299] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 104.715489][ T6299] FS: 00007ff90756d6c0(0000) GS:ffff8881246f9000(0000) knlGS:0000000000000000 [ 104.726002][ T6299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.732857][ T6299] CR2: 000055eda08b9660 CR3: 00000000345c4000 CR4: 00000000003526f0 [ 104.741186][ T6299] Kernel panic - not syncing: Fatal exception [ 104.747452][ T6299] Kernel Offset: disabled [ 104.751756][ T6299] Rebooting in 86400 seconds..