last executing test programs: 5.100611586s ago: executing program 0 (id=1): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x7, 0x8009, 0x1, 0xfc, 0xc, 0x0, 0xf}, 0xc) ioctl$EVIOCGSW(r0, 0x5452, &(0x7f0000001440)=""/4103) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4084) 4.941784972s ago: executing program 0 (id=6): setgroups(0x24, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64000000c00000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x11, 0x4, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, 0x0}, 0x4000) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010200000000000000000c0000000c000000020000000000000002000006040000000000ba196d63b5a0459ed0e9daa2187011c3e66ea1ee81c864c14b67ab468eba948045150e5daf5dc0dc5130225fc5b630b0b46f0fde94939a28a0073b3a0ff0699a353917a14a317ed0cebec7867c50de1e80e743af9be4dfa955897e5412b1713b9939704200c15a1e567884c8622b4cf167dd92acfa3cabd389d4278723714cd15277d14ed906f43add88826b97a685c4f32c070b71cde6d4fc90963e1a85891415add2586179c4d4"], &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x17) listen(r6, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) socket$nl_route(0x10, 0x3, 0x0) 4.737309197s ago: executing program 3 (id=4): syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x2d, &(0x7f0000000640)=""/169, &(0x7f0000000740)=0xa9) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc0585609, &(0x7f00000004c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "708657ab"}, 0x0, 0x4, {0x0}}) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x80044d76, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 3.730658252s ago: executing program 1 (id=2): mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000101401002cbd7000ffdbdf25080003000100000008004a0001000000080001000000000050cc9a710f0ad01abefd15c718c14afe8c63c24f1527270210bf20f9a787deeea76cc2874dcf97d7ad9181e2"], 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000500010006"], 0x1c}}, 0x0) r8 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r8, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpid() 3.643255928s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) msgget(0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) lsm_set_self_attr(0x68, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x1a5800) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r3, &(0x7f0000000080)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r3, 0x1da8c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x108, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1008, 0x201}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x81}]}}}, @IFLA_PORT_SELF={0xac, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7444bad2f3c27997713299e582638094"}, @IFLA_PORT_PROFILE={0x1f, 0x2, 'mmap_lock_acquire\x8e\x02q../\x04&\x02\xce'}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0000000000000f7b00"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x36}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d9f8e5332be116273d244b24805400"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f2ed66ac45205a844873c956e50e1b80"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "22d14cfa28c58ae1610ba727d1462074"}]}]}, 0x108}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 3.620383493s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6f, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000040000000000000000000000850000008100000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b70200000100000085000000c7000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x90, &(0x7f0000000140)=""/144, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x1, 0x3, 0xd, 0x7}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x9, @void, @value}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_BT_SECURITY(r5, 0x29, 0x4c, 0x0, 0x20000011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='fsi_master_acf_cmd_abs_addr\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000000)=[{0x80}, {0x80}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2c, &(0x7f00000027c0)=ANY=[@ANYRESOCT], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x121280, 0x0) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000000)=0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) dup(r8) r9 = io_uring_setup(0x4e8f, 0x0) close(r9) 2.711434851s ago: executing program 1 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_submit(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000019c0)=0xfffffff8, 0x4) sendmmsg$inet6(r1, &(0x7f0000001240)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfc, @remote, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x99, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x6c}}}], 0x18}}], 0x2, 0x20000004) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) 1.957371771s ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f00000001c0)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfeff, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r1, 0xffffffffffffffff, 0x0) write$tun(r0, 0x0, 0x0) 1.715861605s ago: executing program 2 (id=10): setgroups(0x24, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64000000c00000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x11, 0x4, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, 0x0}, 0x4000) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010200000000000000000c0000000c000000020000000000000002000006040000000000ba196d63b5a0459ed0e9daa2187011c3e66ea1ee81c864c14b67ab468eba948045150e5daf5dc0dc5130225fc5b630b0b46f0fde94939a28a0073b3a0ff0699a353917a14a317ed0cebec7867c50de1e80e743af9be4dfa955897e5412b1713b9939704200c15a1e567884c8622b4cf167dd92acfa3cabd389d4278723714cd15277d14ed906f43add88826b97a685c4f32c070b71cde6d4fc90963e1a85891415add2586179c4d4"], &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x17) listen(r6, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.173100532s ago: executing program 4 (id=5): accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) io_uring_setup(0x70f8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0xfe74}], 0x2}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x65}) 375.816948ms ago: executing program 0 (id=11): ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000023c0)={r1}, &(0x7f0000000300)=0x8) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x8000}, @in={0x2, 0x4e21, @loopback}, @nfc={0x27, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x7, 0x40}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 374.01721ms ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff98, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20000094}, 0x408c0) syz_open_dev$vim2m(0x0, 0x7ff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={0x0, 0x0, "a4cd91", 0x9}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) 285.827511ms ago: executing program 1 (id=13): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x1, 0x0, 'queue1\x00', 0x6}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010001000000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="670033005008fc00ffffffffffff0802110000005050505050500b0000000000000000003d0000000006020202020202010004060207051ee5022d1a0100000000000046fd6156aa710700ff0000003e60dd06a63aa2f563eb04"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x2004c000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000b00)) syz_open_procfs$pagemap(0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0xe0, 0x4d, 0x20, 0xe6f, 0x582c, 0x3168, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x47, 0xd0, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) 244.174438ms ago: executing program 4 (id=14): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) setrlimit(0x9, 0x0) bind$bt_hci(r0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) 169.777067ms ago: executing program 3 (id=15): setgroups(0x24, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64000000c00000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x11, 0x4, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, 0x0}, 0x4000) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010200000000000000000c0000000c000000020000000000000002000006040000000000ba196d63b5a0459ed0e9daa2187011c3e66ea1ee81c864c14b67ab468eba948045150e5daf5dc0dc5130225fc5b630b0b46f0fde94939a28a0073b3a0ff0699a353917a14a317ed0cebec7867c50de1e80e743af9be4dfa955897e5412b1713b9939704200c15a1e567884c8622b4cf167dd92acfa3cabd389d4278723714cd15277d14ed906f43add88826b97a685c4f32c070b71cde6d4fc90963e1a85891415add2586179c4d4"], &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x17) listen(r6, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=16): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x86}]}, 0x2c}}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x94, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x71, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x7, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x6, 0x0, {0xb80, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0xfff, 0xa}}, @void, [{0xdd, 0x2b, "92fbafd3f7f871cda0d193a570bde09968187429c30f3f8e79b2ef4a6ba3dfd88f33a658425b75cae8a8ff"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0x96}, 0x20) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'hsr0\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x3, [0x1, 0x2, 0x260d]}}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x0, 0x7, 0x6, 0x1, 0x0, 0x101, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 43.346883][ T29] audit: type=1400 audit(1732773177.082:88): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.349896][ T5822] cgroup: Unknown subsys name 'net' [ 43.369595][ T29] audit: type=1400 audit(1732773177.082:89): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.398589][ T29] audit: type=1400 audit(1732773177.142:90): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.575056][ T5822] cgroup: Unknown subsys name 'cpuset' [ 43.582261][ T5822] cgroup: Unknown subsys name 'rlimit' [ 43.694146][ T29] audit: type=1400 audit(1732773177.432:91): avc: denied { setattr } for pid=5822 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.721202][ T29] audit: type=1400 audit(1732773177.432:92): avc: denied { create } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.742558][ T29] audit: type=1400 audit(1732773177.432:93): avc: denied { write } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.763131][ T29] audit: type=1400 audit(1732773177.432:94): avc: denied { read } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.782167][ T5825] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.783595][ T29] audit: type=1400 audit(1732773177.432:95): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.817224][ T29] audit: type=1400 audit(1732773177.432:96): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.840673][ T29] audit: type=1400 audit(1732773177.462:97): avc: denied { read } for pid=5504 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.648999][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.570290][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.581929][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.590620][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.598204][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 46.605684][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.614543][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.619328][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.628821][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.636584][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.642952][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.644360][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.657990][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 46.660296][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.665578][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.673110][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.679614][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 46.685773][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 46.693907][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.707195][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.707908][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.715727][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 46.722125][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.728875][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 46.735869][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.742832][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.749620][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.762891][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 46.765564][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.777371][ T5161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 46.788957][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.090829][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 47.111206][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 47.135379][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 47.193914][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 47.207440][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 47.244249][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.251678][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.259116][ T5832] bridge_slave_0: entered allmulticast mode [ 47.266075][ T5832] bridge_slave_0: entered promiscuous mode [ 47.273949][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.281156][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.288269][ T5832] bridge_slave_1: entered allmulticast mode [ 47.294931][ T5832] bridge_slave_1: entered promiscuous mode [ 47.380492][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.387806][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.395233][ T5833] bridge_slave_0: entered allmulticast mode [ 47.401520][ T5833] bridge_slave_0: entered promiscuous mode [ 47.409591][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.427802][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.435009][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.442085][ T5839] bridge_slave_0: entered allmulticast mode [ 47.448830][ T5839] bridge_slave_0: entered promiscuous mode [ 47.455624][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.463169][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.470253][ T5839] bridge_slave_1: entered allmulticast mode [ 47.476753][ T5839] bridge_slave_1: entered promiscuous mode [ 47.483512][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.490549][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.497664][ T5834] bridge_slave_0: entered allmulticast mode [ 47.504315][ T5834] bridge_slave_0: entered promiscuous mode [ 47.510857][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.518016][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.525145][ T5833] bridge_slave_1: entered allmulticast mode [ 47.531444][ T5833] bridge_slave_1: entered promiscuous mode [ 47.538628][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.555167][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.562207][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.569589][ T5837] bridge_slave_0: entered allmulticast mode [ 47.575938][ T5837] bridge_slave_0: entered promiscuous mode [ 47.587396][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.594556][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.601627][ T5834] bridge_slave_1: entered allmulticast mode [ 47.608361][ T5834] bridge_slave_1: entered promiscuous mode [ 47.633600][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.640671][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.648171][ T5837] bridge_slave_1: entered allmulticast mode [ 47.654851][ T5837] bridge_slave_1: entered promiscuous mode [ 47.673664][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.684691][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.695493][ T5832] team0: Port device team_slave_0 added [ 47.713039][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.723341][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.734490][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.744724][ T5832] team0: Port device team_slave_1 added [ 47.765623][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.776815][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.791135][ T5833] team0: Port device team_slave_0 added [ 47.801943][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.812129][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.819123][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.845341][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.867033][ T5833] team0: Port device team_slave_1 added [ 47.877695][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.884684][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.910960][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.928064][ T5834] team0: Port device team_slave_0 added [ 47.935692][ T5834] team0: Port device team_slave_1 added [ 47.955347][ T5839] team0: Port device team_slave_0 added [ 47.978031][ T5837] team0: Port device team_slave_0 added [ 47.985745][ T5837] team0: Port device team_slave_1 added [ 47.992335][ T5839] team0: Port device team_slave_1 added [ 48.011281][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.018307][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.044993][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.069409][ T5832] hsr_slave_0: entered promiscuous mode [ 48.075570][ T5832] hsr_slave_1: entered promiscuous mode [ 48.082292][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.089355][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.115670][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.135990][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.142991][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.169014][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.188375][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.199199][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.225130][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.237127][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.244395][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.270400][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.282839][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.289792][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.315689][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.336893][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.343911][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.370044][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.382581][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.389515][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.415598][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.461699][ T5834] hsr_slave_0: entered promiscuous mode [ 48.467845][ T5834] hsr_slave_1: entered promiscuous mode [ 48.475866][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.483614][ T5834] Cannot create hsr debugfs directory [ 48.505285][ T5833] hsr_slave_0: entered promiscuous mode [ 48.511264][ T5833] hsr_slave_1: entered promiscuous mode [ 48.517640][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.525229][ T5833] Cannot create hsr debugfs directory [ 48.548948][ T5839] hsr_slave_0: entered promiscuous mode [ 48.555904][ T5839] hsr_slave_1: entered promiscuous mode [ 48.561780][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.569648][ T5839] Cannot create hsr debugfs directory [ 48.585341][ T5837] hsr_slave_0: entered promiscuous mode [ 48.591258][ T5837] hsr_slave_1: entered promiscuous mode [ 48.597709][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.605282][ T5837] Cannot create hsr debugfs directory [ 48.800834][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.812267][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.825718][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.832892][ T5851] Bluetooth: hci2: command tx timeout [ 48.843061][ T5846] Bluetooth: hci1: command tx timeout [ 48.848613][ T5846] Bluetooth: hci0: command tx timeout [ 48.852478][ T5851] Bluetooth: hci3: command tx timeout [ 48.854516][ T5161] Bluetooth: hci4: command tx timeout [ 48.862602][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.886224][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.900601][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.913268][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.921562][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.960067][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.976926][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.986903][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.999819][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.041568][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.050013][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.058934][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.069238][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.105641][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.114397][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.124562][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.138304][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.147077][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.164905][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.195765][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.202919][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.223016][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.240835][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.247906][ T4030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.279498][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.306996][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.314075][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.325889][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.333007][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.363258][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.401894][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.425479][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.436806][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 49.436818][ T29] audit: type=1400 audit(1732773183.182:112): avc: denied { sys_module } for pid=5832 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.444075][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.479644][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.497166][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.504248][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.517005][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.533525][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.540595][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.559243][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.566352][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.583636][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.590679][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.630655][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.660826][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.667968][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.693275][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.700344][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.717701][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.748388][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.846399][ T5832] veth0_vlan: entered promiscuous mode [ 49.878473][ T5834] veth0_vlan: entered promiscuous mode [ 49.896920][ T5832] veth1_vlan: entered promiscuous mode [ 49.929169][ T5834] veth1_vlan: entered promiscuous mode [ 49.948534][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.996362][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.020153][ T5834] veth0_macvtap: entered promiscuous mode [ 50.036391][ T5834] veth1_macvtap: entered promiscuous mode [ 50.050529][ T5832] veth0_macvtap: entered promiscuous mode [ 50.070794][ T5839] veth0_vlan: entered promiscuous mode [ 50.082203][ T5832] veth1_macvtap: entered promiscuous mode [ 50.096575][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.109741][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.126274][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.140439][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.151853][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.163792][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.174596][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.185796][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.196567][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.211830][ T5839] veth1_vlan: entered promiscuous mode [ 50.223067][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.231909][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.241215][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.252110][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.263452][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.272129][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.281603][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.290755][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.339660][ T5837] veth0_vlan: entered promiscuous mode [ 50.375072][ T5833] veth0_vlan: entered promiscuous mode [ 50.394741][ T5839] veth0_macvtap: entered promiscuous mode [ 50.404749][ T5837] veth1_vlan: entered promiscuous mode [ 50.427679][ T5839] veth1_macvtap: entered promiscuous mode [ 50.448773][ T5833] veth1_vlan: entered promiscuous mode [ 50.470401][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.483890][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.494976][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.498218][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.505202][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.523456][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.534147][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.543972][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.546449][ T5837] veth0_macvtap: entered promiscuous mode [ 50.551768][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.575739][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.586276][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.596856][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.607402][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.618156][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.630560][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.632236][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.647516][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.648128][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.667713][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.676835][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.696781][ T5837] veth1_macvtap: entered promiscuous mode [ 50.706246][ T29] audit: type=1400 audit(1732773184.442:113): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.uFnHsl/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.728056][ T5833] veth0_macvtap: entered promiscuous mode [ 50.738366][ T5833] veth1_macvtap: entered promiscuous mode [ 50.746925][ T29] audit: type=1400 audit(1732773184.452:114): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.758507][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.775701][ T29] audit: type=1400 audit(1732773184.452:115): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.uFnHsl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.781849][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.803006][ T29] audit: type=1400 audit(1732773184.452:116): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.832101][ T29] audit: type=1400 audit(1732773184.452:117): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.uFnHsl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.867453][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.879802][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.882582][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.892290][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.913195][ T29] audit: type=1400 audit(1732773184.452:118): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.uFnHsl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.915328][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.946460][ T5161] Bluetooth: hci3: command tx timeout [ 50.952225][ T5846] Bluetooth: hci4: command tx timeout [ 50.957531][ T5161] Bluetooth: hci0: command tx timeout [ 50.965942][ T5846] Bluetooth: hci1: command tx timeout [ 50.969288][ T5161] Bluetooth: hci2: command tx timeout [ 50.975322][ T29] audit: type=1400 audit(1732773184.452:119): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.979876][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.011852][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.021839][ T29] audit: type=1400 audit(1732773184.492:120): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 51.023987][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.048683][ T29] audit: type=1400 audit(1732773184.492:121): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.080613][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.092956][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.102880][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.113385][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.123307][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.133777][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.144663][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.173405][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.182107][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.196576][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.205558][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.226019][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.244719][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.268759][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.279728][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.290400][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.301035][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.311160][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.321754][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.333627][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.363083][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.380291][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.390656][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.402122][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.412334][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.422883][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.433706][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.445345][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.456086][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.485205][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.533380][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.548976][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.622504][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.650045][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.659176][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.112846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.192941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 52.202607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.211026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.219608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.228017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.236469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.277505][ T4030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.309614][ T4030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.339244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.348205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.388086][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.409818][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.417308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.469198][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.511299][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.712607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.725881][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.735916][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.302814][ T5161] Bluetooth: hci1: command tx timeout [ 53.308572][ T5161] Bluetooth: hci0: command tx timeout [ 53.314809][ T5161] Bluetooth: hci4: command tx timeout [ 53.320453][ T5161] Bluetooth: hci3: command tx timeout [ 53.441028][ T5161] Bluetooth: hci2: command tx timeout [ 53.508198][ T5937] Zero length message leads to an empty skb [ 54.197040][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.347412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.363198][ T5941] sctp: failed to load transform for md5: -2 [ 54.558835][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 54.558849][ T29] audit: type=1400 audit(1732773188.292:163): avc: denied { setopt } for pid=5938 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.999580][ T29] audit: type=1400 audit(1732773188.702:164): avc: denied { create } for pid=5930 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.574065][ T5161] Bluetooth: hci3: command tx timeout [ 55.579781][ T5161] Bluetooth: hci4: command tx timeout [ 55.585453][ T5161] Bluetooth: hci0: command tx timeout [ 55.590973][ T5161] Bluetooth: hci1: command tx timeout [ 55.596508][ T5161] Bluetooth: hci2: command tx timeout [ 55.730174][ T29] audit: type=1400 audit(1732773188.992:165): avc: denied { create } for pid=5957 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.772903][ T29] audit: type=1400 audit(1732773189.002:166): avc: denied { write } for pid=5957 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.795065][ T29] audit: type=1400 audit(1732773189.302:167): avc: denied { ioctl } for pid=5957 comm="syz.4.5" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7963 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.974222][ T29] audit: type=1400 audit(1732773189.712:168): avc: denied { write } for pid=5963 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.001155][ T5968] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 56.058283][ T29] audit: type=1400 audit(1732773189.792:169): avc: denied { create } for pid=5969 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.091201][ T5972] Bluetooth: MGMT ver 1.23 [ 56.098764][ T5965] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 56.149006][ T29] audit: type=1400 audit(1732773189.822:170): avc: denied { write } for pid=5963 comm="syz.2.12" path="socket:[7984]" dev="sockfs" ino=7984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.316718][ T29] audit: type=1400 audit(1732773190.052:171): avc: denied { create } for pid=5975 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 57.129270][ T29] audit: type=1400 audit(1732773190.082:172): avc: denied { ioctl } for pid=5975 comm="syz.2.16" path="socket:[8335]" dev="sockfs" ino=8335 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 57.293623][ T5846] ================================================================== [ 57.301707][ T5846] BUG: KASAN: slab-use-after-free in set_powered_sync+0xc1/0xd0 [ 57.309333][ T5846] Read of size 8 at addr ffff888024d60d98 by task kworker/u9:4/5846 [ 57.317288][ T5846] [ 57.319596][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:4 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 57.330062][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.340096][ T5846] Workqueue: hci0 hci_cmd_sync_work [ 57.345281][ T5846] Call Trace: [ 57.348531][ T5846] [ 57.351436][ T5846] dump_stack_lvl+0x116/0x1f0 [ 57.356088][ T5846] print_report+0xc3/0x620 [ 57.360491][ T5846] ? __virt_addr_valid+0x5e/0x590 [ 57.365488][ T5846] ? __phys_addr+0xc6/0x150 [ 57.369963][ T5846] kasan_report+0xd9/0x110 [ 57.374352][ T5846] ? set_powered_sync+0xc1/0xd0 [ 57.379173][ T5846] ? set_powered_sync+0xc1/0xd0 [ 57.383994][ T5846] set_powered_sync+0xc1/0xd0 [ 57.388640][ T5846] hci_cmd_sync_work+0x1a4/0x410 [ 57.393546][ T5846] process_one_work+0x9c5/0x1ba0 [ 57.398456][ T5846] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.404080][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 57.409452][ T5846] ? rcu_is_watching+0x12/0xc0 [ 57.414227][ T5846] ? assign_work+0x1a0/0x250 [ 57.418813][ T5846] worker_thread+0x6c8/0xf00 [ 57.423403][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 57.428504][ T5846] kthread+0x2c1/0x3a0 [ 57.432546][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.437713][ T5846] ? __pfx_kthread+0x10/0x10 [ 57.442270][ T5846] ret_from_fork+0x45/0x80 [ 57.446653][ T5846] ? __pfx_kthread+0x10/0x10 [ 57.451214][ T5846] ret_from_fork_asm+0x1a/0x30 [ 57.455967][ T5846] [ 57.458964][ T5846] [ 57.461257][ T5846] Allocated by task 5972: [ 57.465551][ T5846] kasan_save_stack+0x33/0x60 [ 57.470194][ T5846] kasan_save_track+0x14/0x30 [ 57.474837][ T5846] __kasan_kmalloc+0xaa/0xb0 [ 57.479391][ T5846] mgmt_pending_new+0x5b/0x290 [ 57.484122][ T5846] mgmt_pending_add+0x36/0x160 [ 57.488853][ T5846] set_powered+0x28c/0x5c0 [ 57.493235][ T5846] hci_sock_sendmsg+0x1528/0x25e0 [ 57.498225][ T5846] sock_write_iter+0x4fe/0x5b0 [ 57.502967][ T5846] vfs_write+0x5ae/0x1150 [ 57.507264][ T5846] ksys_write+0x207/0x250 [ 57.511555][ T5846] do_syscall_64+0xcd/0x250 [ 57.516028][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.521900][ T5846] [ 57.524205][ T5846] Freed by task 5970: [ 57.528147][ T5846] kasan_save_stack+0x33/0x60 [ 57.532791][ T5846] kasan_save_track+0x14/0x30 [ 57.537432][ T5846] kasan_save_free_info+0x3b/0x60 [ 57.542426][ T5846] __kasan_slab_free+0x51/0x70 [ 57.547154][ T5846] kfree+0x14f/0x4b0 [ 57.551015][ T5846] settings_rsp+0x257/0x400 [ 57.555491][ T5846] mgmt_pending_foreach+0xdf/0x140 [ 57.560573][ T5846] __mgmt_power_off+0xc8/0x2c0 [ 57.565302][ T5846] hci_dev_close_sync+0xcbb/0x11a0 [ 57.570384][ T5846] hci_dev_do_close+0x2e/0x90 [ 57.575044][ T5846] hci_dev_close+0x183/0x1e0 [ 57.579609][ T5846] hci_sock_ioctl+0x2b5/0x7d0 [ 57.584254][ T5846] sock_do_ioctl+0x116/0x280 [ 57.588822][ T5846] sock_ioctl+0x228/0x6c0 [ 57.593120][ T5846] __x64_sys_ioctl+0x190/0x200 [ 57.597853][ T5846] do_syscall_64+0xcd/0x250 [ 57.602325][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.608186][ T5846] [ 57.610478][ T5846] The buggy address belongs to the object at ffff888024d60d80 [ 57.610478][ T5846] which belongs to the cache kmalloc-96 of size 96 [ 57.624328][ T5846] The buggy address is located 24 bytes inside of [ 57.624328][ T5846] freed 96-byte region [ffff888024d60d80, ffff888024d60de0) [ 57.637932][ T5846] [ 57.640222][ T5846] The buggy address belongs to the physical page: [ 57.646596][ T5846] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d60 [ 57.655322][ T5846] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.662405][ T5846] page_type: f5(slab) [ 57.666364][ T5846] raw: 00fff00000000000 ffff88801b041280 dead000000000122 0000000000000000 [ 57.674914][ T5846] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 57.683459][ T5846] page dumped because: kasan: bad access detected [ 57.689831][ T5846] page_owner tracks the page as allocated [ 57.695512][ T5846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 55678247256, free_ts 54503137529 [ 57.713964][ T5846] post_alloc_hook+0x2d1/0x350 [ 57.718707][ T5846] get_page_from_freelist+0xfce/0x2f80 [ 57.724138][ T5846] __alloc_pages_noprof+0x223/0x25a0 [ 57.729394][ T5846] alloc_pages_mpol_noprof+0x2c9/0x610 [ 57.734822][ T5846] new_slab+0x2c9/0x410 [ 57.738952][ T5846] ___slab_alloc+0xdac/0x1870 [ 57.743602][ T5846] __slab_alloc.constprop.0+0x56/0xb0 [ 57.748938][ T5846] __kmalloc_noprof+0x2ec/0x510 [ 57.753755][ T5846] cfg80211_inform_single_bss_data+0x543/0x1de0 [ 57.759961][ T5846] cfg80211_inform_bss_data+0x205/0x3ba0 [ 57.765558][ T5846] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 57.771588][ T5846] ieee80211_bss_info_update+0x311/0xab0 [ 57.777186][ T5846] ieee80211_scan_rx+0x474/0xac0 [ 57.782089][ T5846] ieee80211_rx_list+0x1bd7/0x2970 [ 57.787172][ T5846] ieee80211_rx_napi+0xdd/0x400 [ 57.791987][ T5846] ieee80211_handle_queued_frames+0xd5/0x130 [ 57.797932][ T5846] page last free pid 24 tgid 24 stack trace: [ 57.803876][ T5846] free_unref_page+0x661/0x1080 [ 57.808694][ T5846] rcu_core+0x79d/0x14d0 [ 57.812905][ T5846] handle_softirqs+0x213/0x8f0 [ 57.817635][ T5846] run_ksoftirqd+0x3a/0x60 [ 57.822018][ T5846] smpboot_thread_fn+0x661/0xa30 [ 57.826923][ T5846] kthread+0x2c1/0x3a0 [ 57.830964][ T5846] ret_from_fork+0x45/0x80 [ 57.835348][ T5846] ret_from_fork_asm+0x1a/0x30 [ 57.840081][ T5846] [ 57.842391][ T5846] Memory state around the buggy address: [ 57.847989][ T5846] ffff888024d60c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.856015][ T5846] ffff888024d60d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.864042][ T5846] >ffff888024d60d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.872065][ T5846] ^ [ 57.876879][ T5846] ffff888024d60e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 57.884906][ T5846] ffff888024d60e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 57.892930][ T5846] ================================================================== [ 57.902203][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.909394][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:4 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 57.919877][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.929902][ T5846] Workqueue: hci0 hci_cmd_sync_work [ 57.935075][ T5846] Call Trace: [ 57.938325][ T5846] [ 57.941224][ T5846] dump_stack_lvl+0x3d/0x1f0 [ 57.945787][ T5846] panic+0x71d/0x800 [ 57.949655][ T5846] ? __pfx_panic+0x10/0x10 [ 57.954042][ T5846] ? irqentry_exit+0x3b/0x90 [ 57.958603][ T5846] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.963770][ T5846] ? preempt_schedule_thunk+0x1a/0x30 [ 57.969107][ T5846] ? preempt_schedule_common+0x44/0xc0 [ 57.974534][ T5846] ? check_panic_on_warn+0x1f/0xb0 [ 57.979611][ T5846] check_panic_on_warn+0xab/0xb0 [ 57.984515][ T5846] end_report+0x117/0x180 [ 57.988811][ T5846] kasan_report+0xe9/0x110 [ 57.993195][ T5846] ? set_powered_sync+0xc1/0xd0 [ 57.998014][ T5846] ? set_powered_sync+0xc1/0xd0 [ 58.002832][ T5846] set_powered_sync+0xc1/0xd0 [ 58.007475][ T5846] hci_cmd_sync_work+0x1a4/0x410 [ 58.012388][ T5846] process_one_work+0x9c5/0x1ba0 [ 58.017299][ T5846] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 58.022899][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 58.028236][ T5846] ? rcu_is_watching+0x12/0xc0 [ 58.032971][ T5846] ? assign_work+0x1a0/0x250 [ 58.037530][ T5846] worker_thread+0x6c8/0xf00 [ 58.042096][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 58.047175][ T5846] kthread+0x2c1/0x3a0 [ 58.051213][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.056379][ T5846] ? __pfx_kthread+0x10/0x10 [ 58.060942][ T5846] ret_from_fork+0x45/0x80 [ 58.065326][ T5846] ? __pfx_kthread+0x10/0x10 [ 58.069884][ T5846] ret_from_fork_asm+0x1a/0x30 [ 58.074619][ T5846] [ 58.077793][ T5846] Kernel Offset: disabled [ 58.082086][ T5846] Rebooting in 86400 seconds..