last executing test programs: 3.030735163s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000283afffe8000000095000000000000000000bbff0200000000000000000000000000018900907800000000fe88000000000000000000000000fd010002122b472e41e24be5000000000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) r4 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x20, 0xc, 0xa6, {0xa6, 0x23, "9660e83d3c7f34db8af7ae796fbb92a15f114748e64cb849e84c8c759cdfcc5892c453b18f460886b24fb3b39b3b40adb2312fe8efb5c18cb109e9401a9a01a44e391f13cf66e85dc0fb538c1b4dbd328bdd673067815d43b809b1e0c5d6489471ab033f913321557bc3286dd45516b499f8b9a8d02a1394a0698a00f90caf7d1692f560794cd27a66d7afbefbddc64580d53956c8538798e85a1775225074b6c4cf12cb"}}, 0x0, 0x0, 0x0}, &(0x7f0000000640)={0x2c, &(0x7f0000000680)={0x20, 0x16, 0x5, "047ae2270e"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x40}, @empty, @mcast1, 0x8, 0x8, 0x6, 0x500, 0x6, 0x84000008, r3}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='p', 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 2.760295545s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20000078}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) 2.758300748s ago: executing program 2 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008840) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) ppoll(&(0x7f0000000200)=[{r0, 0x6049}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) fgetxattr(r4, &(0x7f0000000240)=@random={'security.', './binderfs/binder0\x00'}, &(0x7f0000000280)=""/43, 0x2b) r5 = dup3(r3, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="ca408f34686e802a69ba61f326c45ea89a6cd9f0b19515ffffffff2f17fd270a213bc17000943365f07c3274d6431a57d6624d0777c5a64637614f87794b221f0adbf8", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf250100000008002b000f00000008003900128b000006002800020000000600280004000000"], 0x34}, 0x1, 0x0, 0x0, 0x40008}, 0x4) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.879679129s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="24002d800e0000003ccf2effd8a100000a0200000001"], 0x40}}, 0x0) 1.877860525s ago: executing program 2 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x1, 0x0, 0xffff, 0xf, 0x5]}, &(0x7f0000000200)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/31, 0x1f) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40804) socket(0x2a, 0x5, 0xd) creat(0x0, 0xae) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000040), 0x8000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x830, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x5, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="08003f000502"], 0x48}}, 0x440088c4) 1.570197363s ago: executing program 1 (id=16): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000002e0000000000000085100000fbffffff950000000000000085e23522b12e107427d8d81135ba1a6361f37be6891fbe"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x201000, 0x8}) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0454da0c79783efd"], 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x28c041) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) write(r5, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) lsetxattr$security_selinux(&(0x7f0000000040)='./mysys\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:fonts_cache_t:s0\x00', 0x23, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) accept(r5, &(0x7f0000000240)=@alg, &(0x7f0000000380)=0xfdf9) r9 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r9, 0x39d7, 0x1, 0x1, 0x0, 0x0) 1.518775272s ago: executing program 3 (id=18): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4004140) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x1, 0xf9, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x400c880) socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040), 0x0) 1.517868295s ago: executing program 3 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_FLOW={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1.450523949s ago: executing program 3 (id=20): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write$ppp(r0, &(0x7f00000001c0)="0002", 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r5, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x200, 0x70bd25, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40054d0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9a14b15c85ea44e0efe3d0b5a43a33487112d92da7e63f769b38a95e7f8d86193b4402541ec74ca04fe4e62a60c3b53730c0d30736154ca658691c67cb5da173aa6c99e3299a8529552194312d7d2e54df52afee1c4d422e2e22a0794db21073ca46297ee80c39251f1c2cc405cc3aba26f188850dfac191e1c397278da63196b745f8945d85e04704485e737208f59e7ae89d8fab8c7cf2cf5fc158d35662e2d49327b83bec666234bc251dbc2add9d03817a1abd752468ca9f553ffc5826", @ANYRES16=r7, @ANYBLOB="060727bd7000fcdbdf25160000000c00990090bc0000670000000a00060008021100000100000a001a00ffffffffffff00000a00060008021100000100000a000600ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x41) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) write$P9_RGETLOCK(r4, &(0x7f0000000380)=ANY=[], 0x200002e6) r8 = inotify_init1(0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}], 0x1) fcntl$setpipe(r4, 0x407, 0x7000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.44988836s ago: executing program 2 (id=21): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x545}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 1.442485828s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioprio_set$uid(0x3, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x609e8a93f04c898d}}, {0xc, 0x1, 0x0, 0x1, {0x4}}, {}, {}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYBLOB="ee2a5139de0da25178f4ba8b641eeb5c0ffb09428497663f5186bfe30e0000000000000000eb3ddee5200b4d96a4c6b382d8fe6bc6432b9a6a0ed0de50553f91bba30ed5e8f6580f0a8fce2c2b24cedd43e083af316502f0212b8da26583d934ea1412faf4e95527a24db4ff70caf73a4c71ef1c406ef049a0cb8d78569c46cbbc3cd8ea98d187add144fd0b2f7815765e"], 0x68}}, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48081}, 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x2c, r8, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x2c}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.110727866s ago: executing program 1 (id=23): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.109349522s ago: executing program 1 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000000)={0x9, 0xc1, 0x5, 0x9}) 521.838504ms ago: executing program 3 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10001, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0x11, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r14, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x28, 0x0, [0xfffffffb, 0x1ff, 0xbb, 0x1000, 0x2, 0x1, 0x2, 0xfffffffe, 0x9, 0xc00, 0xffffff3f, 0x9, 0x6, 0x8000008, 0xfffffff7, 0x10000005]}], r15, 0x1, 0x1, 0x48}}, 0x20) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r16, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r16, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x5e21, 0x2000b11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x4e1e, 0x5, @private0={0xfc, 0x0, '\x00', 0x20}}}}, 0x108) bind$inet6(r16, &(0x7f00000001c0)={0xa, 0x8000002, 0x6, @mcast1, 0x4}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103a00fc000000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000e2f303d38fc4980e1ac3961fa2c073592eeac536b234236922e8d5fe9a2e911686c95eb599232c84108d73dd645f4c"], 0x0) 520.717186ms ago: executing program 1 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 441.066465ms ago: executing program 1 (id=25): r0 = socket(0x10, 0x5, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc", 0x20, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 440.198779ms ago: executing program 1 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xc, 0xf1a, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) write(r0, &(0x7f0000000180)="341ece4540879043a5011741f4647616814475a4b45cad9a200c231dd4f38af03e05c8feeb9e26c052fe2372a1ebaa699296a540257d26", 0x37) ftruncate(r0, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x5, 0x3, 0x5, 0x6, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d6, 0xc0, 0x9, 0x74, 0x4, 0x20000000}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0x30}}, 0xd0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x104, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x38}}, 0x20000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @empty}], 0x10) recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/37, 0x25}], 0x7, &(0x7f0000000880)=""/202, 0xca}, 0x9}, {{&(0x7f0000000980)=@isdn, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/62, 0x3e}, {&(0x7f0000000c00)=""/172, 0xac}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d00)=""/101, 0x65}, {&(0x7f0000001d80)=""/90, 0x5a}], 0xa, &(0x7f0000001ec0)=""/74, 0x4a}}], 0x2, 0x12100, &(0x7f0000001fc0)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000002000), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000002040)="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", 0x1000) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x18}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) pipe2$9p(&(0x7f0000003140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATFS(r7, &(0x7f0000003180)={0x43, 0x9, 0x1, {0xa, 0x3ff, 0x6, 0x8, 0x7, 0x3b, 0x8, 0xfffffffffffffff7, 0xd}}, 0x43) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003200), 0x1, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003240)={0x1, 0x0, 0xc8, 0xfffffffd, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x39}, @local}, 0x10) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000003280)='/selinux/commit_pending_bools\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003300), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000003480)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f0000003340)={0xd0, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1a21}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48014}, 0xc080) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000003500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000034c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000003540)={0xf, 0x8, 0xfa00, {r11, 0x2}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x78, r10, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000810}, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x2) 62.841154ms ago: executing program 3 (id=27): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000140)="daa27f2f7cd361cdc1e6db5a9cb218b89ba879bbe9a690ce104780bac91f422e10b75b6a20f949cb12c5ebf8c8c12308fe6c94ae") 0s ago: executing program 3 (id=28): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) read(r3, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r2, 0x400454cc, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000300)={0x2, "134c4092b0389292017cc6c63ab926b1b73591a170e6b48aefc8a77ade5efc8e", 0x0, 0x20, 0x2, 0x81, 0x1, 0x2, 0xc, 0x6}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="15000200ad"], 0x19) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) kernel console output (not intermixed with test programs): [ 38.440094][ T42] audit: type=1400 audit(1785773383.223:118): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.474669][ T42] audit: type=1400 audit(1785773383.253:119): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.635639][ T42] audit: type=1400 audit(1785773383.413:120): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:4744' (ED25519) to the list of known hosts. [ 42.357412][ T5705] cgroup: Unknown subsys name 'net' [ 42.481631][ T5705] cgroup: Unknown subsys name 'cpuset' [ 42.487706][ T5705] cgroup: Unknown subsys name 'rlimit' [ 42.619055][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 42.619068][ T42] audit: type=1400 audit(1785773387.403:144): avc: denied { setattr } for pid=5705 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.628460][ T42] audit: type=1400 audit(1785773387.403:145): avc: denied { create } for pid=5705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.634793][ T42] audit: type=1400 audit(1785773387.403:146): avc: denied { write } for pid=5705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.641223][ T42] audit: type=1400 audit(1785773387.403:147): avc: denied { read } for pid=5705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.647709][ T42] audit: type=1400 audit(1785773387.403:148): avc: denied { mounton } for pid=5705 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.655598][ T42] audit: type=1400 audit(1785773387.403:149): avc: denied { mount } for pid=5705 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.662838][ T42] audit: type=1400 audit(1785773387.433:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.669367][ T42] audit: type=1400 audit(1785773387.433:151): avc: denied { read } for pid=5451 comm="dhcpcd" name="n31" dev="tmpfs" ino=1892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.675998][ T42] audit: type=1400 audit(1785773387.433:152): avc: denied { open } for pid=5451 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.683003][ T42] audit: type=1400 audit(1785773387.433:153): avc: denied { getattr } for pid=5451 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1892 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.683174][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.483148][ T5705] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.968537][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.982674][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.986455][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.989615][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.991446][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.992136][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.992417][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.995255][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.999721][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.003851][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.003956][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.004356][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.005383][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.006698][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.007706][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.007966][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.008717][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.009058][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.013431][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.015369][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.595462][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.598118][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.600483][ T5737] bridge_slave_0: entered allmulticast mode [ 47.603173][ T5737] bridge_slave_0: entered promiscuous mode [ 47.626468][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.629559][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.632596][ T5737] bridge_slave_1: entered allmulticast mode [ 47.636635][ T5737] bridge_slave_1: entered promiscuous mode [ 47.640721][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.643208][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.645636][ T5743] bridge_slave_0: entered allmulticast mode [ 47.648843][ T5743] bridge_slave_0: entered promiscuous mode [ 47.652282][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.654645][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.657075][ T5743] bridge_slave_1: entered allmulticast mode [ 47.659834][ T5743] bridge_slave_1: entered promiscuous mode [ 47.702622][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.705530][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.707972][ T5742] bridge_slave_0: entered allmulticast mode [ 47.710627][ T5742] bridge_slave_0: entered promiscuous mode [ 47.713992][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.716304][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.719989][ T5742] bridge_slave_1: entered allmulticast mode [ 47.722931][ T5742] bridge_slave_1: entered promiscuous mode [ 47.741383][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.759862][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.764386][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.769015][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.816033][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.830249][ T5743] team0: Port device team_slave_0 added [ 47.834045][ T5743] team0: Port device team_slave_1 added [ 47.843788][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.847878][ T5737] team0: Port device team_slave_0 added [ 47.851415][ T5737] team0: Port device team_slave_1 added [ 47.892243][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.895285][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.899649][ T5741] bridge_slave_0: entered allmulticast mode [ 47.902912][ T5741] bridge_slave_0: entered promiscuous mode [ 47.914667][ T5742] team0: Port device team_slave_0 added [ 47.917190][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.919419][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.927945][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.933186][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.935489][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.943724][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.947985][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.950393][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.958573][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.962400][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.965519][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.968713][ T5741] bridge_slave_1: entered allmulticast mode [ 47.972356][ T5741] bridge_slave_1: entered promiscuous mode [ 47.985962][ T5742] team0: Port device team_slave_1 added [ 47.993430][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.995684][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.003781][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.038577][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.040848][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.049052][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.053637][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.055895][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.064896][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.071675][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.083522][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.130057][ T5743] hsr_slave_0: entered promiscuous mode [ 48.133471][ T5743] hsr_slave_1: entered promiscuous mode [ 48.151083][ T5737] hsr_slave_0: entered promiscuous mode [ 48.153361][ T5737] hsr_slave_1: entered promiscuous mode [ 48.155461][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.157598][ T5737] Cannot create hsr debugfs directory [ 48.161319][ T5741] team0: Port device team_slave_0 added [ 48.172644][ T5742] hsr_slave_0: entered promiscuous mode [ 48.174904][ T5742] hsr_slave_1: entered promiscuous mode [ 48.177686][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 48.179522][ T5742] Cannot create hsr debugfs directory [ 48.182855][ T5741] team0: Port device team_slave_1 added [ 48.236659][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.238955][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.246766][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.257054][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.259234][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.267134][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.375690][ T5741] hsr_slave_0: entered promiscuous mode [ 48.378532][ T5741] hsr_slave_1: entered promiscuous mode [ 48.381109][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.382977][ T5741] Cannot create hsr debugfs directory [ 48.559798][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.569228][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.588148][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.592875][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.611376][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.616256][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.619776][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.626242][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.679945][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.687372][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.690385][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.696540][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.699602][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.705044][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.710562][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.717427][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.777470][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.782403][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.785756][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.790908][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.793654][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.798911][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.801559][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.806252][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.864030][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.880640][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.884524][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.887451][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.891074][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.894640][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.901225][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.905506][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.910430][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.932144][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.949799][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.952412][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.964773][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.978219][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.980568][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.000250][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.016438][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.018718][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.029317][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.038613][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.040751][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.069117][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.077548][ T5746] Bluetooth: hci3: command tx timeout [ 49.077551][ T5754] Bluetooth: hci1: command tx timeout [ 49.077567][ T64] Bluetooth: hci2: command tx timeout [ 49.077851][ T5746] Bluetooth: hci0: command tx timeout [ 49.092045][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.094921][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.111470][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.114406][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.146758][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.175043][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.190756][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.193550][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.210845][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.213188][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.352239][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.379436][ T5743] veth0_vlan: entered promiscuous mode [ 49.387687][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.391201][ T5743] veth1_vlan: entered promiscuous mode [ 49.402422][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.440346][ T5743] veth0_macvtap: entered promiscuous mode [ 49.451834][ T5743] veth1_macvtap: entered promiscuous mode [ 49.459463][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.462775][ T5737] veth0_vlan: entered promiscuous mode [ 49.477988][ T5737] veth1_vlan: entered promiscuous mode [ 49.488043][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.493432][ T5742] veth0_vlan: entered promiscuous mode [ 49.499073][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.518101][ T5742] veth1_vlan: entered promiscuous mode [ 49.535611][ T5737] veth0_macvtap: entered promiscuous mode [ 49.556457][ T5737] veth1_macvtap: entered promiscuous mode [ 49.564823][ T5741] veth0_vlan: entered promiscuous mode [ 49.586321][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.590384][ T5742] veth0_macvtap: entered promiscuous mode [ 49.594276][ T5742] veth1_macvtap: entered promiscuous mode [ 49.601647][ T5741] veth1_vlan: entered promiscuous mode [ 49.613247][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.632323][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.633305][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.635153][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.647007][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.651262][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.668399][ T5741] veth0_macvtap: entered promiscuous mode [ 49.675924][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.679866][ T5741] veth1_macvtap: entered promiscuous mode [ 49.681012][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.703385][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 49.703396][ T42] audit: type=1400 audit(1785773394.483:168): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.707221][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.712941][ T42] audit: type=1400 audit(1785773394.483:169): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.otDlUp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.725254][ T42] audit: type=1400 audit(1785773394.483:170): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.732167][ T42] audit: type=1400 audit(1785773394.493:171): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.otDlUp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.736019][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.740711][ T42] audit: type=1400 audit(1785773394.493:172): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/syzkaller.otDlUp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.752155][ T42] audit: type=1400 audit(1785773394.493:173): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.758356][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.758396][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.758442][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.758505][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.761417][ T42] audit: type=1400 audit(1785773394.503:174): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.762281][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.782538][ T42] audit: type=1400 audit(1785773394.513:175): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="gadgetfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.786277][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.789927][ T42] audit: type=1400 audit(1785773394.513:176): avc: denied { mount } for pid=5743 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.800835][ T42] audit: type=1400 audit(1785773394.513:177): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.813073][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.823905][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.828625][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.842691][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.845183][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.877207][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.878058][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.882899][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.894057][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.898531][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.903567][ T5892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5892 comm=syz.3.4 [ 49.905335][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.909930][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.914489][ T5892] bond0: entered promiscuous mode [ 49.916240][ T5892] bond_slave_0: entered promiscuous mode [ 49.918467][ T5892] bond_slave_1: entered promiscuous mode [ 49.922146][ T5892] batadv0: entered promiscuous mode [ 49.929440][ T5892] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.938471][ T5892] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 49.945246][ T5892] syz_tun: entered promiscuous mode [ 49.951093][ T5892] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.955949][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.964092][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.987080][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.992640][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.016968][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.027120][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.047357][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.050798][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.059433][ T5898] syzkaller0: entered promiscuous mode [ 50.061180][ T5898] syzkaller0: entered allmulticast mode [ 50.067936][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.071415][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296608][ T5928] binder: BINDER_SET_CONTEXT_MGR already set [ 50.298749][ T5928] binder: 5925:5928 ioctl 4018620d 200000004a80 returned -16 [ 50.307365][ T5744] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 50.469683][ T5744] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.474067][ T5744] usb 5-1: not running at top speed; connect to a high speed hub [ 50.478932][ T5744] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 50.482145][ T5744] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 50.484743][ T5744] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 50.488380][ T34] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 50.490733][ T5744] usb 5-1: config 14 has no interface number 0 [ 50.492723][ T5744] usb 5-1: config 14 has no interface number 1 [ 50.494691][ T5744] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 50.498193][ T5744] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 50.501850][ T5744] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.506378][ T5744] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.509616][ T5744] usb 5-1: config 14 interface 57 has no altsetting 0 [ 50.511726][ T5744] usb 5-1: config 14 interface 228 has no altsetting 0 [ 50.515779][ T5744] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 50.519014][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.521497][ T5744] usb 5-1: Product: syz [ 50.522835][ T5744] usb 5-1: Manufacturer: syz [ 50.524299][ T5744] usb 5-1: SerialNumber: syz [ 50.669400][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 50.672887][ T34] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 50.675565][ T34] usb 8-1: config 8 has no interface number 0 [ 50.678191][ T34] usb 8-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 50.685541][ T34] usb 8-1: string descriptor 0 read error: -22 [ 50.687821][ T34] usb 8-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 50.690764][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.697909][ T5924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 50.906516][ T34] usb 8-1: USB disconnect, device number 2 [ 50.941840][ T5744] legousbtower 5-1:14.57: interrupt endpoints not found [ 51.158220][ T64] Bluetooth: hci0: command tx timeout [ 51.158244][ T5754] Bluetooth: hci3: command tx timeout [ 51.167812][ T5754] Bluetooth: hci2: command tx timeout [ 51.167844][ T64] Bluetooth: hci1: command tx timeout [ 51.350295][ T5744] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 51.359621][ T5744] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 51.370613][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 51.574537][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 51.579310][ T5957] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 51.582078][ T5957] nbd: error processing sock list [ 51.590399][ T5958] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22'. [ 51.591961][ T5959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5959 comm=syz.2.22 [ 51.600064][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 51.610883][ T5957] team0: Port device team_slave_0 removed [ 51.617722][ T5952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=5952 comm=syz.3.20 [ 51.626806][ T5942] dummy_hcd dummy_hcd.0: remove, state 1 [ 51.629828][ T5942] usb usb5: USB disconnect, device number 1 [ 51.631858][ T5942] usb 5-1: USB disconnect, device number 2 [ 51.641959][ T5942] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 51.659667][ T5942] dummy_hcd dummy_hcd.0: stopped [ 51.661354][ T5942] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 51.670477][ T5942] SELinux: Context system_u:object_r:fonts_cache_t:s0 is not valid (left unmapped). [ 52.514477][ T5971] syzkaller0: entered promiscuous mode [ 52.516378][ T5971] syzkaller0: entered allmulticast mode [ 53.027925][ T5964] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 53.031892][ T5964] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 53.034651][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 53.037642][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.040927][ T5964] RIP: 0010:set_link_state+0x27/0xc70 [ 53.042707][ T5964] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 53.049369][ T5964] RSP: 0018:ffffc90003a37850 EFLAGS: 00010046 [ 53.051375][ T5964] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 [ 53.053988][ T5964] RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 [ 53.056215][ T5964] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 53.058738][ T5964] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 53.061934][ T5964] R13: ffff888023200000 R14: 0000000000000000 R15: ffff888023200c00 [ 53.065188][ T5964] FS: 0000000000000000(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 53.068140][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.070487][ T5964] CR2: 00007f2295f5da08 CR3: 000000002e5cc000 CR4: 0000000000352ef0 [ 53.073038][ T5964] Call Trace: [ 53.074166][ T5964] [ 53.075217][ T5964] ? __pfx_dummy_pullup+0x10/0x10 [ 53.076885][ T5964] dummy_pullup+0xf3/0x170 [ 53.078426][ T5964] ? __pfx_dummy_pullup+0x10/0x10 [ 53.080421][ T5964] usb_gadget_disconnect_locked+0x142/0x4e0 [ 53.082848][ T5964] gadget_unbind_driver+0xd8/0x4f0 [ 53.084978][ T5964] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 53.087327][ T5964] device_remove+0xcb/0x180 [ 53.089237][ T5964] device_release_driver_internal+0x44e/0x620 [ 53.091735][ T5964] driver_detach+0xd8/0x1b0 [ 53.093670][ T5964] bus_remove_driver+0x13b/0x2e0 [ 53.095730][ T5964] driver_unregister+0x76/0xb0 [ 53.097770][ T5964] usb_gadget_unregister_driver+0x49/0x70 [ 53.100139][ T5964] raw_release+0x19b/0x260 [ 53.102059][ T5964] ? __pfx_raw_release+0x10/0x10 [ 53.103794][ T5964] __fput+0x3ff/0xb50 [ 53.105103][ T5964] task_work_run+0x150/0x240 [ 53.106620][ T5964] ? __pfx_task_work_run+0x10/0x10 [ 53.108287][ T5964] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.110000][ T5964] do_exit+0x951/0x2ae0 [ 53.111397][ T5964] ? __pfx_do_exit+0x10/0x10 [ 53.113128][ T5964] ? do_raw_spin_lock+0x128/0x260 [ 53.114743][ T5964] ? find_held_lock+0x2b/0x80 [ 53.116301][ T5964] ? get_signal+0x7e0/0x21e0 [ 53.117788][ T5964] do_group_exit+0xd5/0x2a0 [ 53.119311][ T5964] get_signal+0x1ec7/0x21e0 [ 53.120824][ T5964] ? __pfx_get_signal+0x10/0x10 [ 53.122379][ T5964] ? do_futex+0x190/0x440 [ 53.123802][ T5964] arch_do_signal_or_restart+0x91/0x7e0 [ 53.125624][ T5964] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 53.128253][ T5964] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.130665][ T5964] ? exc_page_fault+0x6f/0xd0 [ 53.132640][ T5964] exit_to_user_mode_loop+0x139/0x6f0 [ 53.134549][ T5964] ? rcu_is_watching+0x12/0xc0 [ 53.136186][ T5964] do_syscall_64+0x666/0x870 [ 53.137997][ T5964] ? clear_bhb_loop+0x40/0x90 [ 53.139822][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.142009][ T5964] RIP: 0033:0x7fe348f9e019 [ 53.143849][ T5964] Code: Unable to access opcode bytes at 0x7fe348f9dfef. [ 53.146762][ T5964] RSP: 002b:00007fe349dc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 53.150216][ T5964] RAX: fffffffffffffe00 RBX: 00007fe349226098 RCX: 00007fe348f9e019 [ 53.153543][ T5964] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe349226098 [ 53.156814][ T5964] RBP: 00007fe349226090 R08: 0000000000000000 R09: 0000000000000000 [ 53.159686][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.162840][ T5964] R13: 00007fe349226128 R14: 00007ffc75f55450 R15: 00007ffc75f55538 [ 53.165783][ T5964] [ 53.166783][ T5964] Modules linked in: [ 53.168065][ T5964] ---[ end trace 0000000000000000 ]--- [ 53.169815][ T5964] RIP: 0010:set_link_state+0x27/0xc70 [ 53.171564][ T5964] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa e4 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 53.179202][ T5964] RSP: 0018:ffffc90003a37850 EFLAGS: 00010046 [ 53.181526][ T5964] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d08c53 [ 53.184259][ T5964] RDX: 0000000000000000 RSI: ffffffff87d07d76 RDI: 0000000000000000 [ 53.186870][ T5964] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 53.189576][ T5964] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 53.192550][ T5964] R13: ffff888023200000 R14: 0000000000000000 R15: ffff888023200c00 [ 53.195106][ T5964] FS: 0000000000000000(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 53.197928][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.200101][ T5964] CR2: 00007f2295f5da08 CR3: 000000002e5cc000 CR4: 0000000000352ef0 [ 53.202677][ T5964] Kernel panic - not syncing: Fatal exception [ 53.205170][ T5964] Kernel Offset: disabled [ 53.206553][ T5964] Rebooting in 86400 seconds..