last executing test programs: 7.286066929s ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) dup2(r5, r5) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xe) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./proc/net/rpc/auth.unix.gid/channel\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='mqueue\x00', 0x1102000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000000500)='0 1000 2000000000 0\n\x00', 0x14) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb}, 0x1c) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x742}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000003}, 0x94) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a826d83000000000b09007a155b5d"], 0x0}, 0x0) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="0301"], 0xc8) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r12, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000b) setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7], 0xc8}}, 0x2004c001) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010026bd7000fcdbdf2508004f0000010000000000080003000000000f08004b001300"/56], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) 7.110973938s ago: executing program 3 (id=4): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001300010002000000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0100000001000000", @ANYBLOB="74710c911c9007adbbd77f832a273d0d54da5eaf70e0db88f37ffa28611d46f358e8d3008a5d4ad0a030f47e4e53e08b8b4b72ea96d3d89a19d50834a9e5189584464c40954a978059d9b4413cec321a382959445554a75c93f9e2b673e23c66e1e40cbdf75b4b043cfe1741d99f7ccb28d235ebbf57ceb63dfc3f98725db8f8f20f3b9831e28ea273f7af77b0de901b", @ANYRES16=r1], 0x20}}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r9, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e8030000080004", @ANYRES32=r9], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='vlan1\x00', 0x10) 6.969698591s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc4000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000b000000cc000000e8"], 0x50) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.969525039s ago: executing program 0 (id=6): socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x700001b, 0x148, 0xb8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'gre0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x15f70d26e22c60f0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) writev(r4, &(0x7f0000002500)=[{&(0x7f0000000000)='8', 0x1}], 0x1) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 5.332992061s ago: executing program 4 (id=5): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0xa9, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x6}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x6, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) timerfd_create(0x6, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r6 = epoll_create1(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0xb}) 4.932940964s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200) write$qrtrtun(r1, &(0x7f0000000100)="b7081c2f7cb84fd96e27b4b90fe73ee10b146781b82abd99e54c78f328b7404a46c96ba6b7d486dd2458615f329b054213a3c5f5ec7798a05fbf4d59b3a8a1268e540311d069b0ac80386cd739358d94c34847dd45f2dec0ab18bc8741e3713739c4e78481a121e3108a01eb4c7b432e4ecdbbc84e708ab1a0ef0667093753ddfe7cc99331930ac7b2889023c0b0d4de2d54eac028", 0x95) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000400)=@userptr={0x1, 0xa, 0x4, 0x100000, 0xa, {0x77359400}, {0x1, 0xc, 0xf9, 0x7, 0x3, 0x5, "2b3fc88c"}, 0x3, 0x2, {&(0x7f0000000140)}, 0x3}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000100)={0x41, 0x15, 0x2, 0x7, "4d5145901f5c18384bbf75e595466b246fb9b1fffffb00"}) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000840)={'wlan0\x00', &(0x7f0000000700)=@ethtool_regs={0x4, 0x5}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.356536814s ago: executing program 1 (id=7): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x138, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x8e, 0xc, "711dadcd9d07fdd92192702f482cc3ca097663120c0ca0d62d759cd294e5d0ba89367bcc70c7906f89411752066bb12933870cefeba6cf8cce8fc4f38c47c3a3933eca6e505c0b3e9c2b9ebe5640ebd99a09d5138818b74d70f71551b355998d3b011869ae87183d2c3f263f6cda71b2f7f0a8f2f6979bd996671f9ea0cd2ebb431e2b61df79bd75ac21"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x160}, 0x1, 0x0, 0x0, 0x18054}, 0x30048805) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, 0x0) getsockname$packet(r0, &(0x7f0000004000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004040)=0x14) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x8fd4}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000003c0)="79e9c5887c85ad63e6131db729e0bc206148f9c95532ec11f24eed3557dccffeef2edcc09407b452d92d58259aff0dabc333855f4b6338f6a9a8b95b69119e17db6e2ff147663a4d7d1fd6fc58d626a39b271016f5327f0ac38f730b29cc5c80b681713afdde3c765802d491a36473d464ec3092d75100ff2a4215b4e2283abe1eef3e239a7e9528c8d66f08ade5c781cfb7c1b7858517be1d7285abc0940f0596ced676605ee822a11a84eab6022edcdfab4b0676068ab06047335a031cb4729f2771ea", 0xc4}, {&(0x7f0000000900)="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", 0x1000}], 0x2, &(0x7f0000001940)=[@hopopts_2292={{0xe8, 0x29, 0x36, {0x1d, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x861b}, @generic={0x5, 0xb0, "5fdd6b2c15c1d80c3ebf9cd7c5a8974b54f003eda07ba6c2f7be93bcdac495ba94541e246a419b498977f6d870a5ebe0364f3d6ed82fb6b515d279e5557691049178baf8cb4327af2529343a92c4deccb61827b5731ff13b1c35adb2bbb802e530f09bd77378f6e577b8f71355ece1b1e273152946929473fe5725c43cb1e71a43b190d12abc327696989feca98354b51609e2872f389d029fa781c54aebb04b4359bf3144f338233a449ffe204a04a0"}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra, @ra={0x5, 0x2, 0x7f}, @generic={0x1}, @ra={0x5, 0x2, 0xffff}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x8b}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x6, 0x8, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0xe, [0x6, 0x1]}}, @ra={0x5, 0x2, 0x356}, @jumbo={0xc2, 0x4, 0xfffffff8}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0xfdb}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x6c, 0x9, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x400, [0x100000000, 0x9, 0x100, 0x81, 0x4]}}, @hao={0xc9, 0x10, @mcast1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x2ce}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffff91}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x220}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="90b1b7f6aa6044bd640296e20c9a3d9c18759f372e84e3adb667a4ef647f1fd061282c5c77ba911e1ae817854800e68cda7809fe77e9c985d02dc22b072c4db8c7edcc694b63515db680bd1f7686642f5e0d1c14cab281bd806ca10fcafb5e5e5ce4c035b81a34d2e843514053bccbaded361cf2f11b2fb6e899780b4359246c6173ed7dc215c11395fbce8a5c8034402e0c16f2479b658313e8fcde8ab491ad07ea32f4d21fe667f70e07660259a867324688b200f8d6e95b39a95188e4aee6be11d72e5f2bb6", 0xc7}, {&(0x7f0000001cc0)="cb95c4bd5de11486a8b9e4897702bbdbddcb61db50bb36d45770e548890696f6d2e9916acd01da31edf9f186dfbc97d8dbb3eb52e83c60e184079e2a48cc941b0a2d8f00e4cc4075072d87aef1bc785dcdd909bcc066d052086315fa3afcd46cdbc4e1a09b557d14e4e55f5deb81b9f15b907c2e779f83eecdf5df28cc3d9afa7454bf7b2ba5dd8b2a7d5065a703ed88ab7952ed1cfdce4bb79f6980c98a9f079bd9accc9a06e0222e", 0xa9}, {&(0x7f0000001d80)="5d8d9119", 0x4}, {&(0x7f0000001dc0)="76f7104dec5667f792b2a4dc5d9256fba7cb9ff13eef483070b151870e076639a2430ef82fbf8dadb057680414d10875a45af2b56646162d00c4593e4edc64fb1378cc3764ade9a271aca381d0dd50cec7b3c0ca19396aa358735765f1e5e03a98be060f411790ce633b8ba0cc59dc5630b6d69b1fb3124071", 0x79}], 0x4, &(0x7f0000004440)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001f80)="730feb2ff9069f1efa0974c842777953dca2866f9b34bc6b66f3634a2e8e5c0ffd83a14e5ce19f21732e3bdbd9fb553fdace3d47bb762ef74c4b84d59e9acbdb", 0x40}], 0x1, &(0x7f0000002000)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x3c, 0x9, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0xfe}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x80}, @jumbo={0xc2, 0x4, 0x2608}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0xdff, [0x1ff, 0x3, 0x1ff, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x2, 0x23, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}, @hopopts={{0x88, 0x29, 0x36, {0x67, 0xd, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xfb, 0xff, [0x7fff, 0x6]}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0xbc, 0x2, [0xa74c, 0xfffffffffffffff9, 0x27, 0x1275, 0x2]}}, @hao={0xc9, 0x10, @private1}, @pad1, @enc_lim={0x4, 0x1, 0xf8}]}}}], 0x140}}, {{&(0x7f0000002140)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000002180)="45c8064d9bf6bd9cb9c0327feedd58726a9d8befe7b5e470080c6f96ceeead97b584f0e552308af7fd051d6a6a33fb746de57c34a53b06566baf288699a9bfb399bcefdc341eac8a8f9a0446fffd58519adb0458707f323fef55e208b633508a059362de8d9ffbedab177353dc8b3bda1888cf0d88723cdd428e5562cb0123d9928a4340db6b69754ad3eddc98a13a631c4ba53b3e955fc310235ff35291a619ed91129d98454caad0f47658836a751c1537b1c8e4790e43ea", 0xb9}, {&(0x7f0000002240)}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="1400000000000000290000003400000001bcd65aac000000"], 0x18}}, {{&(0x7f0000002300)={0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000002340)="33497c689b58f98687985dd922c2995fe47048482c0b0dbbb2b7958e2df26c7f4884c333c57e19c89e3399a4a9d30a92f258242626e2380be7cf7a9b0e913512c510297f9ed1a9c8a8edf45ebf2299eb0126f55268", 0x55}], 0x1}}, {{&(0x7f0000002400)={0xa, 0x4e24, 0x5, @local, 0x1ff}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002440)="1d3982afe4af8c4734bf60015fd3cb3a9aa4d3b38044bf625de7f0588c6f25c455e991c138a9c968a5b4144e2f51ad0729163d800642b2c290ccac8629f6f3e6022a54375f15a72aaea12f8bb40c8b31ac9221478118080d52f2272cf840c59c3c", 0x61}, {&(0x7f00000006c0)="d5630f778e7f49403d9e3708522103a9ef86a248e1e7ad0ba5e88bfae661f28605860c5672ae15d9abb5e3b1e755a34395f8461426ba3016b4fcc705ef352d0f415c2d2738b9f48c221bed1bf68c171203bdd1033a5fd5e7d46df47f362cf80e1645057f77fa356a020915b8889ab246f816a02a110ea07f0366d68ee561455f37d394da9dcdbd7f8f762a96261299ca10527543aa467aed6e26b15e504b2b64640efdb3257fd75056bb90d2380f9729fed6fab5", 0xb4}, {&(0x7f0000002580)="e5b99e5debf14789afaaa3b043494f336cfa126ce13edfa0afbc52efae2ba2ddc4dc12999083d48db35d95c56507a0ec71762a889b635e15a07092c4597d5e12007c487c33e3258bbd719be8034f384c58985885890b86e0c08ae7581a04b1ef4a51a708184ec51173e594b0580bbb88c6217371f04b8153f4703135df629d2847ba8ef9ba15e94a4375f77903", 0x8d}, {&(0x7f0000002640)="ec2e144b43b44c4113b0bf2aa468c4c7a2434ef0a5550794fb5fe1df7d2626745a85bb1ca8b6b42c5cda398a780b6f126e2eb7cffd302b430005cd8442c1e5af67807308c580de3b9b928150fd76f5c6430728d304b9e9acf9af809bbd70b55435a026bc3f8c42b8aaace8d23078a499a0ef8954357c0b1a291b57fa20db110c98cc8919f8fa827d9b75", 0x8a}, {&(0x7f0000002700)="e21bf8fb15e707caa061788cb0e24742171be2af5b1c5ba835a653f67856b1f3b6303d613a4215fd3ccec032daf341a9", 0x30}], 0x5}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000027c0)="dc07af5f2661454e68480f9aa94088b112f9304a35aa1ba890c4cd1a94fe66f6376afbcd3b8a2215b69abd7d1892cdfa9be63f67561fc46894f50ac8d6e8e919aec6a01bf6d5963ffa1b", 0x4a}, {&(0x7f0000002840)="de5540448379e97d545770ff07773c56218c8f2d448c0fe71d628ace04c96e564132c7c29041ae13becdbf8fff18c6841c43917bb214dd2b56a9111a3a07fad621b08abcc247e32ad0c0909159a31dfffcfbb5f61fa705a385c7939e7b42b98e95750e90ad81c2eed7a5f7e8757d239ba90542dccf2e521240bc820b2f7c910fffa317fe5a3fe2b56f09956afe9f9a8871407e2edd3a2c89de2526f188920851d50c7babf4600bb805760ad7728d81941cca154e0cd4f7bf08d4a8717c96ef5fe51ec73b24905e0ac9128898b77b7b95bcac6aeff199e007879acad4", 0xdc}, {&(0x7f0000002940)="f6a698f6790cf7af2ad14f881c57862ff4421b695df9fce0d8e8e41ee6f3070a441f651dfdd3525dcc92bd9a8e3367988d3564df4bca633a7365ad7174b1f6c18dfd29a5ddf35500f57ccdba96898c8f90c9b3221344e4351e45f3ac212d2860801216fea664fd575322cfac4802c4f328ea6df33e09035b94eafa64f9552145604eeda10afdb4a264856544bac5ef9c3e4a", 0x92}], 0x3}}, {{&(0x7f0000002a40)={0xa, 0x4e20, 0xa, @private2, 0x1}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000002a80)="98dd95db7536bf070c5fc5e2a2b0454438188a33db097ae396a7dcc8a878924b08edac0bb8a1d7a6837b0c2d711d7100915a26fe131603f58482882ebbe8fe17c2bea22cd3c596426ab3b077917dc4770b506a2690e9cfdce2ef1650ed1302402c2060ee28818242", 0x68}, {&(0x7f0000002b00)="e869365818a62cb92ebacc2a8d27f0994eca206a4224ac3278bfd1e126e29ece11d916e776d87c1599e48f0e3e3541cb8ac0f3f36110d8c0918a179184545307a4225ec44e0952ac3b55e3ae88a22bf5ff496a2cc4c54680f32dea61cac788f7a1d27e2bb177b8f281b0eb5afa6c70917767eddd1be5970d9bbfc60f3349833446de711275ae05f3ee9c6ae7f11d1b1e0c0995e4", 0x94}, {&(0x7f0000002bc0)="e53e8501f1df394aebb505c20dc42ae0c1c0ab35c75060af7dc5df9d653c64df1d2db9a39d195ed9616b5e1e8622f989b09be35d98c01c019ea8d776604ecfc0ad393ecf990e250014982d5e00fd7102a0589bdd5b01410a4e39e8d2fcf254457cf304b610c06574f86826f98fad348c2b18f39e8c5ab5cccf2805344ca7257a2378368f749b09", 0x87}, {&(0x7f0000002c80)="33e8e8a666b40b3d41d15a79dd5e1a63cd8680d667725c1c207e5ae272d6d4c23158ea6d6d0887eb62daa0addbdb83fbe73dc82247053384233902947baa36391eae87299717a40c86ea84f0fd2f2185d7365d767cdaf266e75e5cceab62321f749093bb0e3b9702178d80a5bdd512c510919325b9933b12338f16081f467c9e1e1f948a59b2de396055ae3ae1fe3e14a072b64ccd2e3b55aaa69ac0a682f5dd13cd3e703a188181b21fe857de4e76a0b6103c4b68d3674dc3457b9b18a3eef0fc5178d356e2ef051a03cedc0004e4261b35c798da07dd158e5be4676106edf0ea2e16340adf7958fc7f9aa668423ca1e0b845979be198e4", 0xf8}, {&(0x7f0000002d80)}, {&(0x7f0000002e00)="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", 0xfc0}], 0x6, &(0x7f0000003e80)=[@tclass={{0x14, 0x29, 0x43, 0xfefe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff5}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff8}}], 0x48}}, {{&(0x7f0000003f00)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9000000}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000003f40)="1d89ff8e1cd70c91dafa228d7496f9b8951473be604a2566805c007d21ee0af69bbbe4317631134762f89fb3244e6171a22b19649d022240b4488e823fb7643c33786fcbac14c302b70404447d4b72dbe57005c677ca9136705463a9b01b98f6be4ba859fd2c4ecbeb21b680ea35891b6849d97c5a73e2bab4dfa73e4335", 0x7e}], 0x1, &(0x7f0000004080)=ANY=[@ANYBLOB="580000000000000029000000390000003208022200000000fc000000000000000000000000000001ec020000000000000000000000000001ff01000000000000000000000000fa01fe8800000000000000000000000001012400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=r7, @ANYBLOB="0000000014000000000000002900000008000000ff7f000000000000280000000000000029000000390000002e02020200000000fc020000000000000000000000000001140000000000000029000000340000000600000000000000140000000000000029000000080000000600000000000000"], 0xf0}}], 0x9, 0x800) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f00000041c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) 3.322065162s ago: executing program 4 (id=8): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001300010002000000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0100000001000000", @ANYBLOB="74710c911c9007adbbd77f832a273d0d54da5eaf70e0db88f37ffa28611d46f358e8d3008a5d4ad0a030f47e4e53e08b8b4b72ea96d3d89a19d50834a9e5189584464c40954a978059d9b4413cec321a382959445554a75c93f9e2b673e23c66e1e40cbdf75b4b043cfe1741d99f7ccb28d235ebbf57ceb63dfc3f98725db8f8f20f3b9831e28ea273f7af77b0de901b", @ANYRES16=r1], 0x20}}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r9, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e8030000080004", @ANYRES32=r9], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='vlan1\x00', 0x10) 3.269412661s ago: executing program 1 (id=9): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf2509000000050007000400000005000800000000000800010002000000"], 0x2c}}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, 0x0, 0x4) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) 2.603625331s ago: executing program 0 (id=10): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001300010002000000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0100000001000000", @ANYBLOB="74710c911c9007adbbd77f832a273d0d54da5eaf70e0db88f37ffa28611d46f358e8d3008a5d4ad0a030f47e4e53e08b8b4b72ea96d3d89a19d50834a9e5189584464c40954a978059d9b4413cec321a382959445554a75c93f9e2b673e23c66e1e40cbdf75b4b043cfe1741d99f7ccb28d235ebbf57ceb63dfc3f98725db8f8f20f3b9831e28ea273f7af77b0de901b", @ANYRES16=r1], 0x20}}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r9, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000140001060500", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e8030000080004", @ANYRES32=r9], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='vlan1\x00', 0x10) 1.66281945s ago: executing program 1 (id=11): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000000c0)=[0x4f0, 0x0, 0x4, 0x3, 0x401, 0xe0, 0xe, 0x9]) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000957f76a29bc5de4a2d3f06ad9db3c4793bcdbb6e8312337189ece639c80034a9b2427802bd800f000000f1e05ca19a584aea14de254aef577f8e7688"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r6, 0x0, 0x7}, 0x38) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000001, 0x8132, 0xffffffffffffffff, 0x0) creat(0x0, 0x63) 1.459247802s ago: executing program 3 (id=12): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000002500)=""/4101) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x3, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x20042000) r10 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x1, r10}) close(0x3) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'dvmrp0\x00', 0x4}, 0x18) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 1.049266651s ago: executing program 2 (id=13): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x12, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) recvmmsg(r0, &(0x7f00000061c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/130, 0x82}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0xfffffffd}, {{&(0x7f0000005e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0}, 0x53}], 0x2, 0x0, 0x0) unshare(0x6a040000) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r6 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x7ffffffffffffd, 0x72219, 0x0, 0x400000000000, 0x2, 0x5, 0x4c8, 0x0, 0x0, 0x10, 0x4, 0x0, 0xfffffffffffffffe, 0x9]}, &(0x7f0000000000)=0x100) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x0, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @fib={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x0, 0x1, 0x1, 0x0, 0x17}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x8b}, @NFTA_REJECT_TYPE={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x80}]}}}, {0x0, 0x1, 0x0, 0x1, @exthdr={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x0, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_DREG={0x0, 0x1, 0x1, 0x0, 0xe}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @queue={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x0, 0x4, 0x1, 0x0, 0x16}]}}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "586fc8ac4707579fc77d1d5ebc7f4d3d9f5a118ae0d7759a17db9f00b8f8e2e221445eaa305a2b762fe4e4cfd720e83dd426d2c7122110e2e93080fd5aeb1e8e445a618c83ae1610a13c2c19049cbfa56f34728edbf83552095d6f2299065971eb0930012116396582654109a0de928ad05bda196f6150d87f2ad4af1818dc3d13c4657c0d9ecd7ad105"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x6, 0x84}}}, 0xa8}}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000100)=0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0xa) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) 815.953339ms ago: executing program 0 (id=14): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x8d57, 0x1, 0x8, 0x255}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x2000, 0x2000, 0x10000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x8000, 0x3, 0x30a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe562, 0x0, 0x2, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x82, 0x800345}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xe) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./proc/net/rpc/auth.unix.gid/channel\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='mqueue\x00', 0x1102000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000000500)='0 1000 2000000000 0\n\x00', 0x14) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb}, 0x1c) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x742}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000003}, 0x94) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a826d83000000000b09007a155b5d"], 0x0}, 0x0) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="0301"], 0xc8) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r12, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000b) setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7], 0xc8}}, 0x2004c001) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010026bd7000fcdbdf2508004f0000010000000000080003000000000f08004b001300"/56], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) 0s ago: executing program 4 (id=15): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf2509000000050007000400000005000800000000000800010002000000"], 0x2c}}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) lsm_set_self_attr(0x67, &(0x7f0000000040)={0x65, 0x0, 0x20}, 0x20, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, 0x0, 0x4) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) kernel console output (not intermixed with test programs): [ 59.086827][ T30] audit: type=1400 audit(1786895455.065:123): avc: denied { write } for pid=5534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.142314][ T30] audit: type=1400 audit(1786895455.125:124): avc: denied { write } for pid=5545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.335338][ T30] audit: type=1400 audit(1786895455.315:125): avc: denied { write } for pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.405284][ T30] audit: type=1400 audit(1786895455.385:126): avc: denied { write } for pid=5559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.601374][ T30] audit: type=1400 audit(1786895455.575:127): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.649945][ T30] audit: type=1400 audit(1786895455.625:128): avc: denied { write } for pid=5573 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 66.436655][ T30] audit: type=1400 audit(1786895462.415:129): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.461071][ T30] audit: type=1400 audit(1786895462.435:130): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.464794][ T5582] cgroup: Unknown subsys name 'net' [ 66.490179][ T30] audit: type=1400 audit(1786895462.475:131): avc: denied { unmount } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.635334][ T5582] cgroup: Unknown subsys name 'cpuset' [ 66.643768][ T5582] cgroup: Unknown subsys name 'rlimit' [ 66.783756][ T30] audit: type=1400 audit(1786895462.765:132): avc: denied { setattr } for pid=5582 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.825761][ T30] audit: type=1400 audit(1786895462.765:133): avc: denied { create } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.846710][ T30] audit: type=1400 audit(1786895462.765:134): avc: denied { write } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.867238][ T30] audit: type=1400 audit(1786895462.765:135): avc: denied { read } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.887728][ T30] audit: type=1400 audit(1786895462.765:136): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.912872][ T30] audit: type=1400 audit(1786895462.765:137): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.924398][ T5585] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.946829][ T30] audit: type=1400 audit(1786895462.925:138): avc: denied { relabelto } for pid=5585 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 67.954780][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.493355][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 71.493371][ T30] audit: type=1400 audit(1786895467.475:142): avc: denied { execmem } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.461707][ T30] audit: type=1400 audit(1786895468.435:143): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.488777][ T30] audit: type=1400 audit(1786895468.435:144): avc: denied { read write } for pid=5593 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.527476][ T30] audit: type=1400 audit(1786895468.445:145): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.559962][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.565108][ T30] audit: type=1400 audit(1786895468.445:146): avc: denied { open } for pid=5593 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.567790][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.591565][ T30] audit: type=1400 audit(1786895468.465:147): avc: denied { ioctl } for pid=5594 comm="syz-executor" path="socket:[4439]" dev="sockfs" ino=4439 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.602500][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.633515][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.646181][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.653330][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.654173][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.667285][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.669678][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.675180][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.683878][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.689264][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.696004][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.703953][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.712124][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.724311][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.724477][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.739754][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.740008][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.754065][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.755942][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.769953][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.781380][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.798760][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.813522][ T30] audit: type=1400 audit(1786895468.745:148): avc: denied { read } for pid=5593 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.835041][ T30] audit: type=1400 audit(1786895468.745:149): avc: denied { open } for pid=5593 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.858484][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.866706][ T30] audit: type=1400 audit(1786895468.745:150): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.889607][ T30] audit: type=1400 audit(1786895468.765:151): avc: denied { module_request } for pid=5593 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.315851][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.323915][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.331043][ T5607] bridge_slave_0: entered allmulticast mode [ 74.338111][ T5607] bridge_slave_0: entered promiscuous mode [ 74.367146][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.374338][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.381424][ T5593] bridge_slave_0: entered allmulticast mode [ 74.388379][ T5593] bridge_slave_0: entered promiscuous mode [ 74.396668][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.403831][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.410948][ T5607] bridge_slave_1: entered allmulticast mode [ 74.417994][ T5607] bridge_slave_1: entered promiscuous mode [ 74.424945][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.432117][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.439204][ T5594] bridge_slave_0: entered allmulticast mode [ 74.446208][ T5594] bridge_slave_0: entered promiscuous mode [ 74.466789][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.474013][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.481347][ T5593] bridge_slave_1: entered allmulticast mode [ 74.490335][ T5593] bridge_slave_1: entered promiscuous mode [ 74.506848][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.514041][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.521276][ T5594] bridge_slave_1: entered allmulticast mode [ 74.528227][ T5594] bridge_slave_1: entered promiscuous mode [ 74.589651][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.620854][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.632575][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.643782][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.665991][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.690496][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.699888][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.707140][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.714487][ T5597] bridge_slave_0: entered allmulticast mode [ 74.722279][ T5597] bridge_slave_0: entered promiscuous mode [ 74.761274][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.769140][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.776642][ T5597] bridge_slave_1: entered allmulticast mode [ 74.785204][ T5597] bridge_slave_1: entered promiscuous mode [ 74.802964][ T5593] team0: Port device team_slave_0 added [ 74.810161][ T5607] team0: Port device team_slave_0 added [ 74.826333][ T5594] team0: Port device team_slave_0 added [ 74.840583][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.848594][ T5606] Bluetooth: hci0: command tx timeout [ 74.848787][ T5606] Bluetooth: hci1: command tx timeout [ 74.854415][ T50] Bluetooth: hci2: command tx timeout [ 74.860384][ T5615] Bluetooth: hci3: command tx timeout [ 74.865856][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.878050][ T5598] bridge_slave_0: entered allmulticast mode [ 74.885051][ T5598] bridge_slave_0: entered promiscuous mode [ 74.893612][ T5593] team0: Port device team_slave_1 added [ 74.900817][ T5607] team0: Port device team_slave_1 added [ 74.907904][ T5594] team0: Port device team_slave_1 added [ 74.921478][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.929752][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.931360][ T5615] Bluetooth: hci4: command tx timeout [ 74.936950][ T5598] bridge_slave_1: entered allmulticast mode [ 74.949098][ T5598] bridge_slave_1: entered promiscuous mode [ 74.979265][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.025716][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.042964][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.049911][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.076339][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.089052][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.096103][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.122040][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.134451][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.141399][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.167897][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.179275][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.186442][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.212524][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.234453][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.247729][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.255261][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.281391][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.299751][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.306745][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.332894][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.353887][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.386064][ T5597] team0: Port device team_slave_0 added [ 75.400541][ T5598] team0: Port device team_slave_0 added [ 75.422834][ T5597] team0: Port device team_slave_1 added [ 75.437885][ T5598] team0: Port device team_slave_1 added [ 75.455043][ T5593] hsr_slave_0: entered promiscuous mode [ 75.461221][ T5593] hsr_slave_1: entered promiscuous mode [ 75.499304][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.506327][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.532232][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.555084][ T5607] hsr_slave_0: entered promiscuous mode [ 75.561159][ T5607] hsr_slave_1: entered promiscuous mode [ 75.567477][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 75.573337][ T5607] Cannot create hsr debugfs directory [ 75.587651][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.594642][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.620730][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.632322][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.639313][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.665402][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.677511][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.684467][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.710415][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.733501][ T5594] hsr_slave_0: entered promiscuous mode [ 75.739661][ T5594] hsr_slave_1: entered promiscuous mode [ 75.745789][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 75.751498][ T5594] Cannot create hsr debugfs directory [ 75.900529][ T5598] hsr_slave_0: entered promiscuous mode [ 75.906993][ T5598] hsr_slave_1: entered promiscuous mode [ 75.913061][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 75.918789][ T5598] Cannot create hsr debugfs directory [ 75.933626][ T5597] hsr_slave_0: entered promiscuous mode [ 75.939718][ T5597] hsr_slave_1: entered promiscuous mode [ 75.946276][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 75.952067][ T5597] Cannot create hsr debugfs directory [ 76.299769][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.311537][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.319305][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.328928][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.337441][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.346178][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.354009][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.363840][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.434038][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.445179][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.453311][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.463200][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.470893][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.479478][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.487658][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.496547][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.564871][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.575236][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.583604][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.593959][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.609410][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.619382][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.632938][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.641561][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.710845][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.749985][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.759449][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.767589][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.777097][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.785191][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.794470][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.802387][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.811312][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.824213][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.868241][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.875577][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.921896][ T5615] Bluetooth: hci3: command tx timeout [ 76.922060][ T50] Bluetooth: hci2: command tx timeout [ 76.927506][ T5603] Bluetooth: hci1: command tx timeout [ 76.932684][ T50] Bluetooth: hci0: command tx timeout [ 76.938387][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.950923][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.984171][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.993949][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.002163][ T5603] Bluetooth: hci4: command tx timeout [ 77.011197][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.023903][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.033434][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.046755][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.055890][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.076065][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.085097][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.125824][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.150017][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.168215][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.175351][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.206460][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.213591][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.250902][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.283809][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.290998][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.306657][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 77.306671][ T30] audit: type=1400 audit(1786895473.285:153): avc: denied { sys_module } for pid=5593 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.319246][ T5607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.348703][ T5607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.368404][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.387146][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.394239][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.481983][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.498012][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.539552][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.546703][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.557477][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.564570][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.655197][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.689683][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.696841][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.743525][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.750671][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.208972][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.386718][ T5593] veth0_vlan: entered promiscuous mode [ 78.404976][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.441202][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.475661][ T5593] veth1_vlan: entered promiscuous mode [ 78.620645][ T5594] veth0_vlan: entered promiscuous mode [ 78.649867][ T5607] veth0_vlan: entered promiscuous mode [ 78.684371][ T5593] veth0_macvtap: entered promiscuous mode [ 78.698633][ T5607] veth1_vlan: entered promiscuous mode [ 78.707577][ T5594] veth1_vlan: entered promiscuous mode [ 78.722924][ T5593] veth1_macvtap: entered promiscuous mode [ 78.744705][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.763206][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.795275][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.820699][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.865079][ T5607] veth0_macvtap: entered promiscuous mode [ 78.892577][ T203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.903736][ T5594] veth0_macvtap: entered promiscuous mode [ 78.915087][ T5607] veth1_macvtap: entered promiscuous mode [ 78.937867][ T5594] veth1_macvtap: entered promiscuous mode [ 78.980078][ T5597] veth0_vlan: entered promiscuous mode [ 79.004889][ T5603] Bluetooth: hci1: command tx timeout [ 79.005806][ T5606] Bluetooth: hci0: command tx timeout [ 79.010301][ T50] Bluetooth: hci2: command tx timeout [ 79.016143][ T203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.016193][ T203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.016231][ T203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.020105][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.024168][ T5615] Bluetooth: hci3: command tx timeout [ 79.068091][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.092177][ T5615] Bluetooth: hci4: command tx timeout [ 79.093663][ T5597] veth1_vlan: entered promiscuous mode [ 79.111021][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.137305][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.174155][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.185796][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.255906][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.268939][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.302491][ T30] audit: type=1400 audit(1786895475.275:154): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/root/syzkaller.zWvEap/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 79.334094][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.344607][ T30] audit: type=1400 audit(1786895475.275:155): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.374986][ T30] audit: type=1400 audit(1786895475.315:156): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/root/syzkaller.zWvEap/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.402640][ T30] audit: type=1400 audit(1786895475.315:157): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.426221][ T30] audit: type=1400 audit(1786895475.335:158): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/root/syzkaller.zWvEap/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.453589][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.466091][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.483206][ T30] audit: type=1400 audit(1786895475.335:159): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/root/syzkaller.zWvEap/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 79.512010][ T30] audit: type=1400 audit(1786895475.335:160): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.514214][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.532933][ T30] audit: type=1400 audit(1786895475.345:161): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.567151][ T5598] veth0_vlan: entered promiscuous mode [ 79.571542][ T30] audit: type=1400 audit(1786895475.355:162): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="gadgetfs" ino=7868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 79.580836][ T5598] veth1_vlan: entered promiscuous mode [ 79.607240][ T5593] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.622404][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.636062][ T5597] veth0_macvtap: entered promiscuous mode [ 79.651758][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.687839][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.698686][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.709110][ T5597] veth1_macvtap: entered promiscuous mode [ 79.729269][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.745520][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.773530][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.802958][ T203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.854620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.855655][ T5598] veth0_macvtap: entered promiscuous mode [ 79.875226][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.896222][ T5598] veth1_macvtap: entered promiscuous mode [ 79.924371][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.959076][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.971928][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.985952][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.014450][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.091919][ T5725] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.161888][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.342622][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 80.419726][ T5801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.429140][ T5801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.789889][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835768][ T5725] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.867069][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.891260][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.905197][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.925746][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.939594][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.954236][ T5725] usb 2-1: config 0 descriptor?? [ 81.083222][ T5615] Bluetooth: hci3: command tx timeout [ 81.084038][ T5606] Bluetooth: hci0: command tx timeout [ 81.088716][ T5615] Bluetooth: hci1: command tx timeout [ 81.088740][ T5615] Bluetooth: hci2: command tx timeout [ 81.154929][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.165094][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.172641][ T5606] Bluetooth: hci4: command tx timeout [ 81.255090][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.267983][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.283870][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.291297][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373119][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.382867][ T203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.392027][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.451935][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.452132][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.468560][ T5725] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 81.502531][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.527854][ T5725] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.543368][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.551526][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.559028][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.592051][ T1094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600884][ T5725] microsoft 0003:045E:07DA.0001: unknown main item tag 0x4 [ 81.631292][ T5725] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.644144][ T5793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.669798][ T5725] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.678996][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 81.700711][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 81.716724][ T5725] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.753595][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.822563][ T10] usb 1-1: config 0 descriptor?? [ 81.856360][ T5806] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.892257][ T5809] XFS (mtdblock0): Invalid superblock magic number [ 81.901426][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 82.020039][ T5725] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 82.074673][ T5725] usb 2-1: USB disconnect, device number 2 [ 82.105933][ T5815] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 82.105933][ T5815] [ 82.155312][ T5815] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 82.231388][ T5815] CIFS: Attempting to mount //127.0.0.1/share [ 82.317180][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 82.317195][ T30] audit: type=1400 audit(1786895478.295:212): avc: denied { create } for pid=5817 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.357666][ T10] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.373881][ T10] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.381400][ T10] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.390031][ T10] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.397830][ T30] audit: type=1400 audit(1786895478.365:213): avc: denied { bind } for pid=5817 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.418715][ T10] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 82.435145][ T10] asus 0003:0B05:1ABE.0002: unexpected long global item [ 82.450558][ T30] audit: type=1400 audit(1786895478.405:214): avc: denied { listen } for pid=5817 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.480603][ T10] asus 0003:0B05:1ABE.0002: Asus hid parse failed: -22 [ 82.492589][ T10] asus 0003:0B05:1ABE.0002: probe with driver asus failed with error -22 [ 82.501227][ T30] audit: type=1400 audit(1786895478.405:215): avc: denied { read write } for pid=5817 comm="syz.2.3" name="video2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.505566][ T5816] fido_id[5816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 82.641983][ T30] audit: type=1400 audit(1786895478.405:216): avc: denied { open } for pid=5817 comm="syz.2.3" path="/dev/video2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.722458][ T5732] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.737517][ T30] audit: type=1400 audit(1786895478.405:217): avc: denied { ioctl } for pid=5817 comm="syz.2.3" path="/dev/video2" dev="devtmpfs" ino=933 ioctlcmd=0x5611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.806761][ T30] audit: type=1400 audit(1786895478.405:218): avc: denied { connect } for pid=5817 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.830466][ T30] audit: type=1400 audit(1786895478.455:219): avc: denied { accept } for pid=5817 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.902383][ T5732] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 82.913058][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.945224][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.955415][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.977202][ T5732] usb 3-1: config 0 descriptor?? [ 83.026406][ T5815] CIFS: VFS: cifs_mount failed w/return code = -112 [ 83.070220][ T30] audit: type=1400 audit(1786895479.035:220): avc: denied { ioctl } for pid=5817 comm="syz.2.3" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.577295][ T30] audit: type=1400 audit(1786895479.235:221): avc: denied { bpf } for pid=5823 comm="syz.1.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.836478][ T5732] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input6 [ 84.151384][ T5732] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 84.435732][ T10] usb 1-1: USB disconnect, device number 2 [ 84.762907][ T5732] usb 3-1: USB disconnect, device number 2 [ 84.853963][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 85.065255][ T5840] fido_id[5840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 85.241074][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.638728][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.795696][ T5851] bridge_slave_0: left allmulticast mode [ 85.829959][ T5851] bridge_slave_0: left promiscuous mode [ 85.858323][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.959706][ T5851] bridge_slave_1: left allmulticast mode [ 85.996324][ T5851] bridge_slave_1: left promiscuous mode [ 86.026723][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.043274][ T5855] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 86.091338][ T5855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12'. [ 86.119330][ T5851] bond0: (slave bond_slave_0): Releasing backup interface [ 86.155542][ T5851] bond0: (slave bond_slave_1): Releasing backup interface [ 86.230318][ T5851] team0: Port device team_slave_0 removed [ 86.290622][ T5851] team0: Port device team_slave_1 removed [ 86.418201][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 86.436070][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.527892][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.786558][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.824924][ T29] cfg80211: failed to load regulatory.db [ 86.870118][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.148452][ T5851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.323206][ T3035] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.355959][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 87.355980][ T30] audit: type=1400 audit(1786895483.345:277): avc: denied { mount } for pid=5871 comm="syz.4.15" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.426764][ T5852] team0: Port device xfrm0 added [ 87.519166][ T5861] ================================================================== [ 87.527346][ T5861] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 87.534284][ T5861] Read of size 1 at addr ffff88802c20ec60 by task syz.0.14/5861 [ 87.541908][ T5861] [ 87.544242][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 87.544271][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.544292][ T5861] Call Trace: [ 87.544300][ T5861] [ 87.544310][ T5861] dump_stack_lvl+0x100/0x190 [ 87.544346][ T5861] print_report+0x13d/0x4b0 [ 87.544379][ T5861] ? __virt_addr_valid+0x239/0x430 [ 87.544412][ T5861] ? string+0x471/0x4d0 [ 87.544433][ T5861] kasan_report+0xdf/0x1c0 [ 87.544465][ T5861] ? string+0x471/0x4d0 [ 87.544490][ T5861] string+0x471/0x4d0 [ 87.544512][ T5861] ? __pfx_string+0x10/0x10 [ 87.544537][ T5861] vsnprintf+0x422/0x1300 [ 87.544565][ T5861] ? __pfx_vsnprintf+0x10/0x10 [ 87.544588][ T5861] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.544614][ T5861] ? is_bpf_text_address+0x94/0x1a0 [ 87.544645][ T5861] ? kernel_text_address+0x8d/0x100 [ 87.544673][ T5861] snprintf+0xc7/0x100 [ 87.544695][ T5861] ? __pfx_snprintf+0x10/0x10 [ 87.544723][ T5861] ? stack_trace_save+0x8e/0xc0 [ 87.544748][ T5861] dev_vprintk_emit+0x375/0x3e0 [ 87.544777][ T5861] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 87.544807][ T5861] ? __x64_sys_ioctl+0x18e/0x210 [ 87.544838][ T5861] ? do_syscall_64+0x115/0x870 [ 87.544863][ T5861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.544890][ T5861] dev_printk_emit+0xd2/0x10d [ 87.544917][ T5861] ? __pfx_dev_printk_emit+0x10/0x10 [ 87.544951][ T5861] __dev_printk+0xcb/0x100 [ 87.544978][ T5861] _dev_err+0xef/0x127 [ 87.545004][ T5861] ? __pfx__dev_err+0x10/0x10 [ 87.545032][ T5861] ? dummy_queue+0x3ca/0xb00 [ 87.545066][ T5861] ? find_held_lock+0x2b/0x80 [ 87.545087][ T5861] ? raw_process_ep0_io+0x314/0x9c0 [ 87.545125][ T5861] raw_process_ep0_io.cold+0x65/0x7f [ 87.545160][ T5861] raw_ioctl+0x1369/0x2b80 [ 87.545204][ T5861] ? __pfx_raw_ioctl+0x10/0x10 [ 87.545239][ T5861] ? selinux_file_ioctl+0xb6/0x290 [ 87.545274][ T5861] ? __pfx_raw_ioctl+0x10/0x10 [ 87.545308][ T5861] __x64_sys_ioctl+0x18e/0x210 [ 87.545342][ T5861] do_syscall_64+0x115/0x870 [ 87.545368][ T5861] ? clear_bhb_loop+0x70/0xc0 [ 87.545394][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.545417][ T5861] RIP: 0033:0x7fe31339dd6b [ 87.545435][ T5861] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 87.545464][ T5861] RSP: 002b:00007fe3141fcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.545495][ T5861] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fe31339dd6b [ 87.545510][ T5861] RDX: 00007fe3141fcfc0 RSI: 0000000040085503 RDI: 000000000000000a [ 87.545524][ T5861] RBP: 00007fe3141fdfd0 R08: 0000000000000040 R09: 00007fe3141fcfc8 [ 87.545539][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 87.545553][ T5861] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fe3134538e2 [ 87.545575][ T5861] [ 87.545586][ T5861] [ 87.829938][ T5861] Allocated by task 1: [ 87.834009][ T5861] kasan_save_stack+0x30/0x50 [ 87.838686][ T5861] kasan_save_track+0x14/0x30 [ 87.843363][ T5861] __kasan_kmalloc+0xaa/0xb0 [ 87.847948][ T5861] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 87.854363][ T5861] kvasprintf+0xbc/0x150 [ 87.858607][ T5861] kvasprintf_const+0x66/0x1a0 [ 87.863373][ T5861] kobject_set_name_vargs+0x5a/0x140 [ 87.868669][ T5861] dev_set_name+0xc7/0x100 [ 87.873078][ T5861] usb_add_gadget+0x520/0x920 [ 87.877747][ T5861] usb_add_gadget_udc+0x26/0x70 [ 87.882595][ T5861] dummy_udc_probe+0x69e/0x960 [ 87.887353][ T5861] platform_probe+0x106/0x1d0 [ 87.892047][ T5861] really_probe+0x241/0xa60 [ 87.896551][ T5861] __driver_probe_device+0x20e/0x450 [ 87.901834][ T5861] driver_probe_device+0x4a/0x140 [ 87.906859][ T5861] __device_attach_driver+0x1df/0x320 [ 87.912232][ T5861] bus_for_each_drv+0x159/0x1e0 [ 87.917083][ T5861] __device_attach+0x1e4/0x4d0 [ 87.921850][ T5861] device_initial_probe+0xaf/0xd0 [ 87.926873][ T5861] bus_probe_device+0x64/0x160 [ 87.931630][ T5861] device_add+0x121d/0x1970 [ 87.936139][ T5861] platform_device_add+0x35a/0x800 [ 87.941332][ T5861] dummy_hcd_init+0x803/0xc00 [ 87.946013][ T5861] do_one_initcall+0x11d/0x700 [ 87.950778][ T5861] kernel_init_freeable+0x6ea/0x7b0 [ 87.955975][ T5861] kernel_init+0x1f/0x1e0 [ 87.960312][ T5861] ret_from_fork+0x72b/0xd50 [ 87.964907][ T5861] ret_from_fork_asm+0x1a/0x30 [ 87.969691][ T5861] [ 87.972003][ T5861] Freed by task 5875: [ 87.975967][ T5861] kasan_save_stack+0x30/0x50 [ 87.980653][ T5861] kasan_save_track+0x14/0x30 [ 87.985343][ T5861] kasan_save_free_info+0x3b/0x70 [ 87.990364][ T5861] __kasan_slab_free+0x5f/0x80 [ 87.995137][ T5861] kfree+0x22b/0x6c0 [ 87.999031][ T5861] kfree_const+0x5a/0x70 [ 88.003268][ T5861] kobject_put+0x218/0x640 [ 88.007697][ T5861] put_device+0x1f/0x30 [ 88.011850][ T5861] platform_remove+0x5f/0x80 [ 88.016436][ T5861] device_remove+0xcb/0x180 [ 88.020938][ T5861] device_release_driver_internal+0x44e/0x620 [ 88.027017][ T5861] unbind_store+0xf8/0x110 [ 88.031426][ T5861] drv_attr_store+0x74/0xb0 [ 88.035933][ T5861] sysfs_kf_write+0xf2/0x150 [ 88.040518][ T5861] kernfs_fop_write_iter+0x3e0/0x5f0 [ 88.045806][ T5861] vfs_write+0x6ac/0x1050 [ 88.050134][ T5861] ksys_write+0x12a/0x250 [ 88.054452][ T5861] do_syscall_64+0x115/0x870 [ 88.059042][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.064948][ T5861] [ 88.067271][ T5861] The buggy address belongs to the object at ffff88802c20ec60 [ 88.067271][ T5861] which belongs to the cache kmalloc-16 of size 16 [ 88.081150][ T5861] The buggy address is located 0 bytes inside of [ 88.081150][ T5861] freed 16-byte region [ffff88802c20ec60, ffff88802c20ec70) [ 88.094686][ T5861] [ 88.097004][ T5861] The buggy address belongs to the physical page: [ 88.103416][ T5861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c20e [ 88.112193][ T5861] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.119303][ T5861] page_type: f5(slab) [ 88.123278][ T5861] raw: 00fff00000000000 ffff88801c022640 dead000000000100 dead000000000122 [ 88.131873][ T5861] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 88.140441][ T5861] page dumped because: kasan: bad access detected [ 88.146850][ T5861] page_owner tracks the page as allocated [ 88.152546][ T5861] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8366947484, free_ts 0 [ 88.171561][ T5861] post_alloc_hook+0xfd/0x120 [ 88.176240][ T5861] get_page_from_freelist+0xf48/0x3530 [ 88.181692][ T5861] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 88.187580][ T5861] new_slab+0xa2/0x640 [ 88.191643][ T5861] refill_objects+0xe3/0x410 [ 88.196233][ T5861] __pcs_replace_empty_main+0x376/0x680 [ 88.201770][ T5861] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 88.208184][ T5861] kvasprintf+0xbc/0x150 [ 88.212429][ T5861] kvasprintf_const+0x66/0x1a0 [ 88.217207][ T5861] kobject_set_name_vargs+0x5a/0x140 [ 88.222498][ T5861] dev_set_name+0xc7/0x100 [ 88.226905][ T5861] usb_hub_create_port_device+0x3a4/0xe60 [ 88.232625][ T5861] hub_probe.cold+0x2974/0x2ed9 [ 88.237469][ T5861] usb_probe_interface+0x303/0x8f0 [ 88.242587][ T5861] really_probe+0x241/0xa60 [ 88.247090][ T5861] __driver_probe_device+0x20e/0x450 [ 88.252375][ T5861] page_owner free stack trace missing [ 88.257723][ T5861] [ 88.260033][ T5861] Memory state around the buggy address: [ 88.265656][ T5861] ffff88802c20eb00: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 88.273706][ T5861] ffff88802c20eb80: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 00 fc fc [ 88.281759][ T5861] >ffff88802c20ec00: 00 00 fc fc 00 01 fc fc 00 01 fc fc fa fb fc fc [ 88.289810][ T5861] ^ [ 88.296999][ T5861] ffff88802c20ec80: 00 00 fc fc 00 04 fc fc 00 04 fc fc fa fb fc fc [ 88.305060][ T5861] ffff88802c20ed00: fa fb fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 88.313113][ T5861] ================================================================== [ 88.453871][ T5853] tipc: Enabling of bearer rejected, failed to enable media [ 88.468090][ T5854] IPVS: Unknown mcast interface: dvmrp0 [ 88.484972][ T5584] IPVS: starting estimator thread 0... [ 88.506984][ T30] audit: type=1400 audit(1786895484.485:278): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.617877][ T30] audit: type=1400 audit(1786895484.585:279): avc: denied { read } for pid=4947 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.620318][ T5861] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.620339][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 88.620365][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.620379][ T5861] Call Trace: [ 88.620386][ T5861] [ 88.620395][ T5861] dump_stack_lvl+0x100/0x190 [ 88.620426][ T5861] vpanic+0x552/0x970 [ 88.620447][ T5861] ? __pfx_vpanic+0x10/0x10 [ 88.620468][ T5861] ? rcu_is_watching+0x12/0xc0 [ 88.620505][ T5861] ? string+0x471/0x4d0 [ 88.620525][ T5861] panic+0xd1/0xe0 [ 88.620545][ T5861] ? __pfx_panic+0x10/0x10 [ 88.620570][ T5861] ? string+0x471/0x4d0 [ 88.620590][ T5861] ? preempt_schedule_common+0x42/0xc0 [ 88.620617][ T5861] check_panic_on_warn.cold+0x19/0x34 [ 88.620641][ T5861] end_report.part.0+0x3a/0x90 [ 88.620673][ T5861] kasan_report.cold+0xe/0x18 [ 88.620704][ T5861] ? string+0x471/0x4d0 [ 88.620728][ T5861] string+0x471/0x4d0 [ 88.620750][ T5861] ? __pfx_string+0x10/0x10 [ 88.620774][ T5861] vsnprintf+0x422/0x1300 [ 88.620802][ T5861] ? __pfx_vsnprintf+0x10/0x10 [ 88.620824][ T5861] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.620850][ T5861] ? is_bpf_text_address+0x94/0x1a0 [ 88.620882][ T5861] ? kernel_text_address+0x8d/0x100 [ 88.620910][ T5861] snprintf+0xc7/0x100 [ 88.620933][ T5861] ? __pfx_snprintf+0x10/0x10 [ 88.620960][ T5861] ? stack_trace_save+0x8e/0xc0 [ 88.620989][ T5861] dev_vprintk_emit+0x375/0x3e0 [ 88.621019][ T5861] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 88.621049][ T5861] ? __x64_sys_ioctl+0x18e/0x210 [ 88.621081][ T5861] ? do_syscall_64+0x115/0x870 [ 88.621105][ T5861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.621132][ T5861] dev_printk_emit+0xd2/0x10d [ 88.621159][ T5861] ? __pfx_dev_printk_emit+0x10/0x10 [ 88.621192][ T5861] __dev_printk+0xcb/0x100 [ 88.621220][ T5861] _dev_err+0xef/0x127 [ 88.621245][ T5861] ? __pfx__dev_err+0x10/0x10 [ 88.621271][ T5861] ? dummy_queue+0x3ca/0xb00 [ 88.621305][ T5861] ? find_held_lock+0x2b/0x80 [ 88.621325][ T5861] ? raw_process_ep0_io+0x314/0x9c0 [ 88.621362][ T5861] raw_process_ep0_io.cold+0x65/0x7f [ 88.621397][ T5861] raw_ioctl+0x1369/0x2b80 [ 88.621433][ T5861] ? __pfx_raw_ioctl+0x10/0x10 [ 88.621465][ T5861] ? selinux_file_ioctl+0xb6/0x290 [ 88.621499][ T5861] ? __pfx_raw_ioctl+0x10/0x10 [ 88.621533][ T5861] __x64_sys_ioctl+0x18e/0x210 [ 88.621566][ T5861] do_syscall_64+0x115/0x870 [ 88.621590][ T5861] ? clear_bhb_loop+0x70/0xc0 [ 88.621615][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.621638][ T5861] RIP: 0033:0x7fe31339dd6b [ 88.621656][ T5861] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 88.621678][ T5861] RSP: 002b:00007fe3141fcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.621700][ T5861] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fe31339dd6b [ 88.621715][ T5861] RDX: 00007fe3141fcfc0 RSI: 0000000040085503 RDI: 000000000000000a [ 88.621730][ T5861] RBP: 00007fe3141fdfd0 R08: 0000000000000040 R09: 00007fe3141fcfc8 [ 88.621745][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 88.621759][ T5861] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fe3134538e2 [ 88.621780][ T5861] [ 88.640055][ T5861] Kernel Offset: disabled