last executing test programs: 1.898525541s ago: executing program 2 (id=77): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.875712711s ago: executing program 0 (id=78): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c1402"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 1.790348603s ago: executing program 2 (id=79): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat(0xffffffffffffffff, 0x0, 0x40042, 0x129) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "f24c73908f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f1cfc15bb4a2c4bcb6502430d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x228, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x7e, 0xc5, "b990e8d581ef1fec1f63a4901e577bc17e7e9cec0436bb8f8669a7dff79e3a039b33d3dab2fcd5e31c996c6a7c3724621ef5dc75ea7963c6cb7b7b26dd565aa6e252fb27fb8c3c13c7ffd2d4629b3c9a9229ba4e567a6926c5031ffa61a4af89d712aba74e0458f6f5edefd8649db00b9935782cc351ca3db2b9"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x6e, 0xc5, "18855c8fc116b5312f9c3665888742ab3a8e49b1d346ce4bcb423e6318706b3e0f0f80b87a4cf7d4ebe82a466a0bc76ad22cab48a8387c8970a4c68ff1263c0a856e9971ad62dd2d07547593376141aea1107108c309e4545fec50d4789eb0e88d67f8244d539537b7d2"}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "f7bfd9b59c51e41df1b356cb0ed37c79dc00a9a060fcae8f3bd895eccc7907982237a2ef9b8748f99967b9f3b2dccae54a55a262c3cc088bcab991b661aab4d6da0964043532cde9f24b0e7ae659fc1921402a1e9861c0eedb8b0c"}, @NL80211_ATTR_VENDOR_DATA={0xac, 0xc5, "172d2ed44d64fc8e27698d9a52486060d5b01e19e717d97477d213fee10aac99d027dd64d00249b03c55d241d578803097b7a05661cd4b651a4ebb3d947ece59d4032acb431926150db126f3d9f223b709938850a74cc59003b8c46471267addb4e40896a7acbc677411c19ef6b6bf58a0e94f896012a8a3d3dfe5f8975866006dd4063a59f02732f38d6a9dba9749c17a02a6a43e5d8a38b303a62bbe22cd5afdac5afea7b0e6c6"}]}, 0x228}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x4048010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d6163736563e0000004000280080005", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf", 0x7, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.754529568s ago: executing program 0 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0xca58c30f81b6079f}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0xfffffffffffffffd) ioctl$int_in(r0, 0x5452, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(0x0, 0x0, 0x181800) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x1, 0x7f, 0x7, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_open_procfs(0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x7bdf, 0x4000, 0x7, 0x39d}, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x2d91, 0x1000, 0x0, 0x2ca}) 1.663192159s ago: executing program 3 (id=82): pipe(&(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.631027543s ago: executing program 4 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 1.540455813s ago: executing program 0 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010069bd7000fedbdf253f000000080003", @ANYBLOB="3c005e800800090008000010080006"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) 1.527186813s ago: executing program 1 (id=85): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4404c880) 1.475482142s ago: executing program 4 (id=86): syz_emit_ethernet(0x5e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000086dd6000000000280600fc000000000000000000000000000000fc0200000000000000000000000000004e24400100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000000fe06e2d4c3d9080a00000003ffffffff000000"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) r4 = epoll_create1(0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0xa) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000000100)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x2, @loopback, 0x6}}}, 0x80) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="2c01d1c16220216ccf75b1ceebde125a86668aed283ad812173150b20ebbaa87579b1b82e3b3e9443c4940c827d58a326ddc51f248be14969bcb399f39e2388e5b", @ANYRES64=r1, @ANYBLOB="61a99eb7e7a9cc903736b34f6b3d97355330b53341e5bc3690e643829f5d544326f3516910a98ba46a9413e63212b4764d2a513152b4785d9025a2160b7a77436b1cd575b95e55de4b1c1ef5f344a4262c9bda265f134c504f8a6d2a6852250e38e8b93f7306e09afe40d0416453ff67c412337c1c84d04360e6027555de2c3af0433f8f44aa3ec4644876a9675f0c6e45ab91a1cad391a5f024411cef6994cdea322d3f7538d59976d0638c5b5f1cc4ab66ed3e4f3aa7bb268ac4803ca460d34afd6f41", @ANYRES32=r8, @ANYRESHEX=r2], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff74020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r12}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 1.446642133s ago: executing program 3 (id=87): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x8, 0xfffffffb, &(0x7f0000000240)}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0x0, 0x8, 0x0, 0x10000007, 0x20000000, 0x4, 0xffffffff], [0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xffffffff}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe}, {}, {0xffffffff, 0xa}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffa, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x2}, 0x0, 0x3f0, 0x0, 0x80d613, 0x0, 0x5, 0x0, 0x0, 0x3, 0x4000000, 0x2000000, 0x0, 0x0, 0x100}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 1.411132705s ago: executing program 1 (id=88): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.374504716s ago: executing program 0 (id=89): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.316410191s ago: executing program 4 (id=90): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_EMATCHES={0x58, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x25, 0x5, "36ed201e8271eed272650579f8a32bfd8156dc7095c6b6cc4c22c477b1015c0e2f"}]}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.28885153s ago: executing program 1 (id=91): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x2dc}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c1402"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 1.269061553s ago: executing program 0 (id=92): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r0, 0xd371f000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000a00)="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", 0x427}, {&(0x7f0000002640)}, {&(0x7f0000000180)="1c52d9162bf6eed73adb797fe1ee51bb4057f66fc8860533bcf7e6f74363a503e27f0e3c6d72c8c0755ca4da1c673ee80d6f8cae5fad434243da8993d3e87ef5adce6de4656f8612da5f45e1ab39638eabdb743bb252e63d76f90b381e39d2872f227f06b8c1a979faf7", 0x6a}, {&(0x7f0000000640)="21f980bc62ab44d7f505fb7212f50e924b5afd546eb6967a75dc1289aa48681f5725bfd09c2d460f2e4e8eb1e5098d71e49106989f724e7441ceaabf11ba5d3d3c8250d710cbd0f9b57b2c68cc52e554c3b03eb0e73ec809c62815e424a673fc858725dcce5423ac53cf6197674c6d977c74c8985c9d5bd6aa5755a9a2fa8249", 0xfe68}], 0x4) 1.215151199s ago: executing program 1 (id=93): prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) listen(r2, 0x3e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x3, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7800, 0x7800, 0x0, 0x4}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x81, 0xff, 0x2, 0x500, 0xae4, 0x4240004, r7}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa72e}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000080)) 969.367478ms ago: executing program 4 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0xca58c30f81b6079f}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0xfffffffffffffffd) ioctl$int_in(r0, 0x5452, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(0x0, 0x0, 0x181800) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x1, 0x7f, 0x7, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_open_procfs(0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x7bdf, 0x4000, 0x7, 0x39d}, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x2d91, 0x1000, 0x0, 0x2ca}) 528.118551ms ago: executing program 2 (id=95): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 507.614281ms ago: executing program 3 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 397.161656ms ago: executing program 2 (id=97): pipe(&(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 326.574958ms ago: executing program 4 (id=98): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4404c880) 266.256802ms ago: executing program 3 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 244.893819ms ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010069bd7000fedbdf253f000000080003", @ANYBLOB="3c005e800800090008000010080006"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) 244.158355ms ago: executing program 2 (id=101): syz_emit_ethernet(0x5e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000086dd6000000000280600fc000000000000000000000000000000fc0200000000000000000000000000004e24400100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000000fe06e2d4c3d9080a00000003ffffffff000000"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) r4 = epoll_create1(0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0xa) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000000100)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x2, @loopback, 0x6}}}, 0x80) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="2c01d1c16220216ccf75b1ceebde125a86668aed283ad812173150b20ebbaa87579b1b82e3b3e9443c4940c827d58a326ddc51f248be14969bcb399f39e2388e5b", @ANYRES64=r1, @ANYBLOB="61a99eb7e7a9cc903736b34f6b3d97355330b53341e5bc3690e643829f5d544326f3516910a98ba46a9413e63212b4764d2a513152b4785d9025a2160b7a77436b1cd575b95e55de4b1c1ef5f344a4262c9bda265f134c504f8a6d2a6852250e38e8b93f7306e09afe40d0416453ff67c412337c1c84d04360e6027555de2c3af0433f8f44aa3ec4644876a9675f0c6e45ab91a1cad391a5f024411cef6994cdea322d3f7538d59976d0638c5b5f1cc4ab66ed3e4f3aa7bb268ac4803ca460d34afd6f41", @ANYRES32=r8, @ANYRESHEX=r2], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff74020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r12}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 145.313966ms ago: executing program 3 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 127.436565ms ago: executing program 4 (id=103): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 85.007161ms ago: executing program 2 (id=104): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_EMATCHES={0x58, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x25, 0x5, "36ed201e8271eed272650579f8a32bfd8156dc7095c6b6cc4c22c477b1015c0e2f"}]}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 59.271786ms ago: executing program 0 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x90100, 0x0) r2 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}], 0x1}], 0x1, 0x40800) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.350938ms ago: executing program 1 (id=106): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f00000006c0)="2a000000010006", 0x7) preadv(r7, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) rt_sigqueueinfo(0x0, 0x3c, 0x0) unshare(0x64000600) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 3 (id=107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 55.504505][ T29] audit: type=1400 audit(1785647080.496:117): avc: denied { write } for pid=5505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.619517][ T29] audit: type=1400 audit(1785647080.606:118): avc: denied { write } for pid=5516 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.928263][ T29] audit: type=1400 audit(1785647080.916:119): avc: denied { write } for pid=5519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.015774][ T29] audit: type=1400 audit(1785647081.006:120): avc: denied { write } for pid=5530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.329742][ T29] audit: type=1400 audit(1785647081.316:121): avc: denied { write } for pid=5533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.416142][ T29] audit: type=1400 audit(1785647081.406:122): avc: denied { write } for pid=5544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.669830][ T29] audit: type=1400 audit(1785647081.656:123): avc: denied { write } for pid=5547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.711277][ T29] audit: type=1400 audit(1785647081.696:124): avc: denied { write } for pid=5558 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.879001][ T29] audit: type=1400 audit(1785647081.866:125): avc: denied { write } for pid=5561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.935931][ T29] audit: type=1400 audit(1785647081.926:126): avc: denied { write } for pid=5572 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 67.541212][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 67.541227][ T29] audit: type=1400 audit(1785647092.526:129): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.571102][ T29] audit: type=1400 audit(1785647092.556:130): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.573724][ T5598] cgroup: Unknown subsys name 'net' [ 67.600323][ T29] audit: type=1400 audit(1785647092.596:131): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.726112][ T5598] cgroup: Unknown subsys name 'cpuset' [ 67.734192][ T5598] cgroup: Unknown subsys name 'rlimit' [ 67.815119][ T29] audit: type=1400 audit(1785647092.806:132): avc: denied { setattr } for pid=5598 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.848037][ T29] audit: type=1400 audit(1785647092.806:133): avc: denied { create } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.874381][ T29] audit: type=1400 audit(1785647092.806:134): avc: denied { write } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.896573][ T29] audit: type=1400 audit(1785647092.806:135): avc: denied { read } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.917245][ T29] audit: type=1400 audit(1785647092.816:136): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.927792][ T5600] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.942455][ T29] audit: type=1400 audit(1785647092.816:137): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.974388][ T29] audit: type=1400 audit(1785647092.946:138): avc: denied { relabelto } for pid=5600 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.922629][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.962449][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.972871][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.973360][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.980692][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.996716][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.997660][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.015148][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.017219][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.029961][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.030725][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.046518][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.047060][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.061568][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.069871][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.079770][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.084192][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.088182][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.094947][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.102545][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.110049][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.119808][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.122640][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.132042][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.143682][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.146180][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.163486][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.174577][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.402834][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.410024][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.417275][ T5626] bridge_slave_0: entered allmulticast mode [ 72.423979][ T5626] bridge_slave_0: entered promiscuous mode [ 72.445817][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.453058][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.460181][ T5611] bridge_slave_0: entered allmulticast mode [ 72.467042][ T5611] bridge_slave_0: entered promiscuous mode [ 72.482221][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.489425][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.496634][ T5626] bridge_slave_1: entered allmulticast mode [ 72.503328][ T5626] bridge_slave_1: entered promiscuous mode [ 72.515954][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.523174][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.530265][ T5611] bridge_slave_1: entered allmulticast mode [ 72.537146][ T5611] bridge_slave_1: entered promiscuous mode [ 72.597873][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.605099][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.612229][ T5613] bridge_slave_0: entered allmulticast mode [ 72.619072][ T5613] bridge_slave_0: entered promiscuous mode [ 72.634470][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.648966][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.660392][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.669788][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.677791][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.684960][ T5613] bridge_slave_1: entered allmulticast mode [ 72.691590][ T5613] bridge_slave_1: entered promiscuous mode [ 72.698581][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.706129][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.713908][ T5610] bridge_slave_0: entered allmulticast mode [ 72.720631][ T5610] bridge_slave_0: entered promiscuous mode [ 72.728975][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.762711][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769939][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.777102][ T5610] bridge_slave_1: entered allmulticast mode [ 72.783898][ T5610] bridge_slave_1: entered promiscuous mode [ 72.803679][ T5611] team0: Port device team_slave_0 added [ 72.809484][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.816714][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.823969][ T5612] bridge_slave_0: entered allmulticast mode [ 72.830612][ T5612] bridge_slave_0: entered promiscuous mode [ 72.857399][ T5611] team0: Port device team_slave_1 added [ 72.869414][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.876717][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.884000][ T5612] bridge_slave_1: entered allmulticast mode [ 72.890634][ T5612] bridge_slave_1: entered promiscuous mode [ 72.899364][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.916562][ T5626] team0: Port device team_slave_0 added [ 72.935647][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.946985][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.958117][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.968660][ T5626] team0: Port device team_slave_1 added [ 72.975054][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.982006][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.008113][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.055499][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.062641][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.088644][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.107682][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.127838][ T5613] team0: Port device team_slave_0 added [ 73.141036][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.148299][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.174881][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.187331][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.196791][ T5624] Bluetooth: hci3: command tx timeout [ 73.196915][ T5624] Bluetooth: hci1: command tx timeout [ 73.208053][ T5621] Bluetooth: hci4: command tx timeout [ 73.208154][ T5621] Bluetooth: hci0: command tx timeout [ 73.208224][ T5621] Bluetooth: hci2: command tx timeout [ 73.219885][ T5610] team0: Port device team_slave_0 added [ 73.231598][ T5613] team0: Port device team_slave_1 added [ 73.249902][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.256963][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.283875][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.302411][ T5610] team0: Port device team_slave_1 added [ 73.326767][ T5612] team0: Port device team_slave_0 added [ 73.349406][ T5611] hsr_slave_0: entered promiscuous mode [ 73.358910][ T5611] hsr_slave_1: entered promiscuous mode [ 73.367568][ T5612] team0: Port device team_slave_1 added [ 73.385977][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.393086][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.419106][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.431104][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.438559][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.464596][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.486414][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.493459][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.519632][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.555400][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.562435][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.588494][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.599877][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.607811][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.633752][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.662483][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.669543][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.695493][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.714447][ T5626] hsr_slave_0: entered promiscuous mode [ 73.720516][ T5626] hsr_slave_1: entered promiscuous mode [ 73.726564][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 73.732321][ T5626] Cannot create hsr debugfs directory [ 73.782205][ T5613] hsr_slave_0: entered promiscuous mode [ 73.788522][ T5613] hsr_slave_1: entered promiscuous mode [ 73.794589][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.800308][ T5613] Cannot create hsr debugfs directory [ 73.827961][ T5610] hsr_slave_0: entered promiscuous mode [ 73.834270][ T5610] hsr_slave_1: entered promiscuous mode [ 73.840606][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 73.846422][ T5610] Cannot create hsr debugfs directory [ 73.924053][ T5612] hsr_slave_0: entered promiscuous mode [ 73.930111][ T5612] hsr_slave_1: entered promiscuous mode [ 73.936350][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 73.942061][ T5612] Cannot create hsr debugfs directory [ 74.212558][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.223427][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.231286][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.240494][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.248268][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.257045][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.269746][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.279219][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.338942][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.348715][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.356723][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.366392][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.374442][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.385066][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.396494][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.407284][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.480559][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.490368][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.498854][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.507627][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.515370][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.524290][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.532468][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.541505][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.635068][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.644074][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.653681][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.665457][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.674710][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.683531][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.691214][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.700601][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.739534][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.758575][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.802711][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.819865][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.829341][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.838306][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.848090][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.855957][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.864546][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.872804][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.882475][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.895647][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.904658][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.911804][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.943684][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.950796][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.960954][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.968049][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.990914][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.998009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.008658][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.081336][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.101356][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.108524][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.131440][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.138590][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.181532][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.267746][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.275393][ T5621] Bluetooth: hci2: command tx timeout [ 75.281957][ T5621] Bluetooth: hci3: command tx timeout [ 75.283239][ T5624] Bluetooth: hci1: command tx timeout [ 75.290952][ T5621] Bluetooth: hci4: command tx timeout [ 75.293338][ T4930] Bluetooth: hci0: command tx timeout [ 75.310062][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.341275][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.348446][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.395169][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.402333][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.424810][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.497899][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.505115][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.539041][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.546215][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.931247][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.011095][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.182174][ T5610] veth0_vlan: entered promiscuous mode [ 76.221599][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.271333][ T5610] veth1_vlan: entered promiscuous mode [ 76.391241][ T5626] veth0_vlan: entered promiscuous mode [ 76.410742][ T5610] veth0_macvtap: entered promiscuous mode [ 76.438814][ T5626] veth1_vlan: entered promiscuous mode [ 76.457057][ T5610] veth1_macvtap: entered promiscuous mode [ 76.480344][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.491236][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.526050][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.537432][ T5611] veth0_vlan: entered promiscuous mode [ 76.552198][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.592483][ T5611] veth1_vlan: entered promiscuous mode [ 76.611200][ T5626] veth0_macvtap: entered promiscuous mode [ 76.641250][ T5626] veth1_macvtap: entered promiscuous mode [ 76.661779][ T5613] veth0_vlan: entered promiscuous mode [ 76.672456][ T5612] veth0_vlan: entered promiscuous mode [ 76.705337][ T5612] veth1_vlan: entered promiscuous mode [ 76.719582][ T5613] veth1_vlan: entered promiscuous mode [ 76.745376][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.772481][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.778699][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.788408][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.802217][ T5611] veth0_macvtap: entered promiscuous mode [ 76.845088][ T5611] veth1_macvtap: entered promiscuous mode [ 76.866447][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.868817][ T5613] veth0_macvtap: entered promiscuous mode [ 76.874973][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.884879][ T5612] veth0_macvtap: entered promiscuous mode [ 76.922107][ T5612] veth1_macvtap: entered promiscuous mode [ 76.928287][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 76.928300][ T29] audit: type=1400 audit(1785647101.906:152): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.aWcyCs/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.945845][ T1027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.967680][ T29] audit: type=1400 audit(1785647101.916:153): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.987277][ T5613] veth1_macvtap: entered promiscuous mode [ 76.990808][ T29] audit: type=1400 audit(1785647101.916:154): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.aWcyCs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.021207][ T29] audit: type=1400 audit(1785647101.916:155): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.053460][ T29] audit: type=1400 audit(1785647101.916:156): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.aWcyCs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.054085][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.095629][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.102445][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.118775][ T29] audit: type=1400 audit(1785647101.916:157): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.aWcyCs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.150140][ T29] audit: type=1400 audit(1785647101.926:158): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.170306][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.185656][ T29] audit: type=1400 audit(1785647101.966:159): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.196181][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.216449][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.227899][ T29] audit: type=1400 audit(1785647101.966:160): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="gadgetfs" ino=7073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.253924][ T29] audit: type=1400 audit(1785647101.966:161): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.256814][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.293734][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.329629][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.344453][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.356585][ T50] Bluetooth: hci4: command tx timeout [ 77.362610][ T50] Bluetooth: hci3: command tx timeout [ 77.368398][ T4930] Bluetooth: hci1: command tx timeout [ 77.374397][ T4930] Bluetooth: hci2: command tx timeout [ 77.379884][ T4930] Bluetooth: hci0: command tx timeout [ 77.419946][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.432265][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.442098][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.451134][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.459442][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502255][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.756621][ T5811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.814400][ T5811] Bluetooth: MGMT ver 1.23 [ 78.111938][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.151164][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.165567][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181701][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.195228][ T5814] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 78.209955][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.249115][ T3367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.395679][ T5814] socket: no more sockets [ 78.449848][ T3367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477213][ T3367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518899][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.529074][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.554308][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.565471][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.640555][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.662019][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.746954][ T1027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.783503][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.815067][ T92] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827661][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.153189][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 79.538434][ T5624] Bluetooth: hci0: command tx timeout [ 79.544593][ T5624] Bluetooth: hci3: command tx timeout [ 79.550921][ T5624] Bluetooth: hci2: command tx timeout [ 79.556997][ T5624] Bluetooth: hci1: command tx timeout [ 79.563159][ T5624] Bluetooth: hci4: command tx timeout [ 79.574095][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.855626][ T3350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.975503][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.123759][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.153850][ T5835] syzkaller0: entered promiscuous mode [ 80.177058][ T5835] syzkaller0: entered allmulticast mode [ 80.239309][ T5837] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.251307][ T5841] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.413476][ T5709] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.485517][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.524411][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581748][ T5847] syzkaller0: entered promiscuous mode [ 80.588260][ T5847] syzkaller0: entered allmulticast mode [ 80.603028][ T92] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.630185][ T5847] tipc: Enabling of bearer rejected, failed to enable media [ 80.632812][ T5709] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 80.650231][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.663871][ T5709] usb 5-1: Product: 祳z [ 80.669050][ T5709] usb 5-1: Manufacturer: 祳z [ 80.676983][ T5709] usb 5-1: SerialNumber: 祳z [ 80.688491][ T5848] tipc: Started in network mode [ 80.694474][ T5848] tipc: Node identity 1277434dd829, cluster identity 4711 [ 80.708797][ T5848] tipc: Enabled bearer , priority 0 [ 80.732276][ T5709] etas_es58x 5-1:1.0: Starting 祳z 祳z (Serial Number 祳z) [ 80.902170][ T5849] syzkaller0: entered promiscuous mode [ 80.932558][ T5849] syzkaller0: entered allmulticast mode [ 80.951864][ T5849] tipc: Resetting bearer [ 80.999793][ T5709] etas_es58x 5-1:1.0: could not parse product info: 'ခ' [ 81.095514][ T5846] tipc: Resetting bearer [ 82.553939][ T3342] wlan1: Trigger new scan to find an IBSS to join [ 83.275414][ T5846] tipc: Disabling bearer [ 83.289364][ T5852] syzkaller0: entered promiscuous mode [ 83.295015][ T5852] syzkaller0: entered allmulticast mode [ 83.328618][ T5742] tipc: Node number set to 3395175245 [ 83.352797][ T5742] usb 5-1: USB disconnect, device number 2 [ 83.411333][ T5742] etas_es58x 5-1:1.0: Disconnecting 祳z 祳z [ 83.444506][ T1027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531860][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 83.531875][ T29] audit: type=1400 audit(1785647108.516:206): avc: denied { connect } for pid=5889 comm="syz.3.19" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.569144][ T29] audit: type=1400 audit(1785647108.526:207): avc: denied { getopt } for pid=5889 comm="syz.3.19" laddr=fe80::382b:9ff:fe1a:2914 lport=60 faddr=ff01::1 fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.615511][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.652033][ T5896] tipc: Started in network mode [ 83.691885][ T29] audit: type=1400 audit(1785647108.536:208): avc: denied { map_create } for pid=5889 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.716112][ T5896] tipc: Node identity 8af0aee63fc9, cluster identity 4711 [ 83.736290][ T5896] tipc: Enabled bearer , priority 0 [ 83.755951][ T29] audit: type=1400 audit(1785647108.536:209): avc: denied { map_read map_write } for pid=5889 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.783989][ T29] audit: type=1400 audit(1785647108.536:210): avc: denied { perfmon } for pid=5889 comm="syz.3.19" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.806547][ T5709] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.819448][ T29] audit: type=1400 audit(1785647108.536:211): avc: denied { create } for pid=5889 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.847321][ T29] audit: type=1400 audit(1785647108.676:212): avc: denied { write } for pid=5897 comm="syz.2.22" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.875138][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.884071][ T29] audit: type=1400 audit(1785647108.676:213): avc: denied { open } for pid=5897 comm="syz.2.22" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.903965][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.919523][ T29] audit: type=1400 audit(1785647108.676:214): avc: denied { ioctl } for pid=5897 comm="syz.2.22" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.946385][ T29] audit: type=1400 audit(1785647108.736:215): avc: denied { create } for pid=5900 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.952081][ T5891] syzkaller0: entered promiscuous mode [ 83.983077][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 83.987675][ T5891] syzkaller0: entered allmulticast mode [ 83.990343][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.004975][ T5891] tipc: Resetting bearer [ 84.018442][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.074170][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.105617][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.152888][ T5709] usb 2-1: config 0 descriptor?? [ 84.198050][ T5709] hub 2-1:0.0: USB hub found [ 84.219803][ T5890] tipc: Resetting bearer [ 84.395989][ T5709] hub 2-1:0.0: 1 port detected [ 84.605397][ T5709] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 84.620993][ T5709] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 84.639499][ T5709] usbhid 2-1:0.0: can't add hid device: -71 [ 84.653198][ T5709] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.687653][ T5709] usb 2-1: USB disconnect, device number 2 [ 84.801041][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 84.811513][ T5929] netlink: 75 bytes leftover after parsing attributes in process `syz.3.28'. [ 84.925447][ T5931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 85.851940][ T5890] tipc: Disabling bearer [ 85.860328][ T5933] netlink: 5176 bytes leftover after parsing attributes in process `syz.3.30'. [ 85.874455][ T5717] tipc: Node number set to 3040456422 [ 86.020058][ T5951] syzkaller0: entered promiscuous mode [ 86.032998][ T5951] syzkaller0: entered allmulticast mode [ 86.198560][ T5961] dummy_hcd dummy_hcd.0: remove, state 4 [ 86.222369][ T5961] usb usb1: USB disconnect, device number 1 [ 86.466764][ T42] cfg80211: failed to load regulatory.db [ 86.480138][ T5982] netlink: 75 bytes leftover after parsing attributes in process `syz.2.40'. [ 86.515847][ T5961] dummy_hcd dummy_hcd.0: stopped [ 86.520928][ T5961] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 86.622051][ T5987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 87.516478][ T92] wlan1: Trigger new scan to find an IBSS to join [ 88.130081][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 88.157473][ T6024] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 88.167320][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 88.262428][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.401004][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54'. [ 88.480905][ T70] wlan1: Creating new IBSS network, BSSID 32:bf:ee:9b:e4:6a [ 88.738694][ T6020] syzkaller0: entered promiscuous mode [ 88.744565][ T6020] syzkaller0: entered allmulticast mode [ 88.886186][ T6035] Zero length message leads to an empty skb [ 89.590401][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 89.590416][ T29] audit: type=1400 audit(1785647114.586:250): avc: denied { shutdown } for pid=6058 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.624324][ T29] audit: type=1400 audit(1785647114.596:251): avc: denied { connect } for pid=6058 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.646163][ T29] audit: type=1400 audit(1785647114.596:252): avc: denied { name_connect } for pid=6058 comm="syz.3.63" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.689735][ T29] audit: type=1400 audit(1785647114.676:253): avc: denied { bind } for pid=6058 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.713608][ T29] audit: type=1400 audit(1785647114.676:254): avc: denied { write } for pid=6058 comm="syz.3.63" path="socket:[9351]" dev="sockfs" ino=9351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.742692][ T29] audit: type=1400 audit(1785647114.676:255): avc: denied { create } for pid=6058 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.781052][ T29] audit: type=1400 audit(1785647114.676:256): avc: denied { ioctl } for pid=6058 comm="syz.3.63" path="socket:[9352]" dev="sockfs" ino=9352 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.890912][ T6066] netlink: 75 bytes leftover after parsing attributes in process `syz.3.66'. [ 90.360950][ T6071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.68'. [ 91.150191][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6099 comm=syz.2.77 [ 91.179943][ T6101] netlink: 5176 bytes leftover after parsing attributes in process `syz.0.78'. [ 91.264621][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.275516][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.426145][ T6110] netlink: 'syz.3.82': attribute type 25 has an invalid length. [ 91.525574][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.84'. [ 91.606679][ T29] audit: type=1400 audit(1785647116.596:257): avc: denied { write } for pid=6121 comm="syz.3.87" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.667946][ T6126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6126 comm=syz.0.89 [ 91.691671][ T29] audit: type=1400 audit(1785647116.616:258): avc: denied { ioctl } for pid=6121 comm="syz.3.87" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.751603][ T6133] netlink: 5176 bytes leftover after parsing attributes in process `syz.1.91'. [ 92.509257][ T29] audit: type=1400 audit(1785647117.496:259): avc: denied { name_bind } for pid=6142 comm="syz.4.94" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.635166][ T6151] netlink: 'syz.2.97': attribute type 25 has an invalid length. [ 92.860026][ T6159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 92.972042][ T6163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6163 comm=syz.4.103 [ 93.041642][ T6168] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 93.053738][ T6168] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 93.062158][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.0.105 Not tainted syzkaller #0 PREEMPT(full) [ 93.071379][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.081526][ T6168] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 93.086999][ T6168] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 93.106684][ T6168] RSP: 0018:ffffc90005a3fb48 EFLAGS: 00010246 [ 93.112752][ T6168] RAX: dffffc0000000000 RBX: ffff88802aadcc00 RCX: ffffc90005ca1000 [ 93.120811][ T6168] RDX: 0000000000000000 RSI: ffffffff87d0e8b7 RDI: ffff88802aadd290 [ 93.128781][ T6168] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 93.136747][ T6168] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888025d10050 [ 93.144699][ T6168] R13: 0000000000000000 R14: ffff88802bc624f1 R15: ffff88802bc62008 [ 93.152677][ T6168] FS: 00007fede4a3e6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 93.161588][ T6168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.168158][ T6168] CR2: 00007fede3f50300 CR3: 00000000569a9000 CR4: 00000000003526f0 [ 93.176114][ T6168] Call Trace: [ 93.179387][ T6168] [ 93.182368][ T6168] gadget_bind_driver+0x4ac/0xbf0 [ 93.187482][ T6168] ? __pfx_gadget_bind_driver+0x10/0x10 [ 93.193008][ T6168] really_probe+0x241/0xa60 [ 93.197497][ T6168] __driver_probe_device+0x20e/0x450 [ 93.202775][ T6168] driver_probe_device+0x4a/0x140 [ 93.207787][ T6168] __driver_attach+0x21f/0x5b0 [ 93.212541][ T6168] ? __pfx___driver_attach+0x10/0x10 [ 93.217826][ T6168] bus_for_each_dev+0x13e/0x1d0 [ 93.222670][ T6168] ? __pfx_bus_for_each_dev+0x10/0x10 [ 93.228025][ T6168] ? bus_add_driver+0x2b5/0x5b0 [ 93.232858][ T6168] bus_add_driver+0x305/0x5b0 [ 93.237516][ T6168] driver_register+0x1e2/0x360 [ 93.242266][ T6168] ? rcu_is_watching+0x12/0xc0 [ 93.247016][ T6168] usb_gadget_register_driver_owner+0x132/0x210 [ 93.253248][ T6168] raw_ioctl+0x1a85/0x2b80 [ 93.257707][ T6168] ? __pfx_raw_ioctl+0x10/0x10 [ 93.262461][ T6168] ? selinux_file_ioctl+0x13b/0x290 [ 93.267649][ T6168] ? selinux_file_ioctl+0xb6/0x290 [ 93.272747][ T6168] ? __pfx_raw_ioctl+0x10/0x10 [ 93.277494][ T6168] __x64_sys_ioctl+0x18e/0x210 [ 93.282245][ T6168] do_syscall_64+0x115/0x870 [ 93.286817][ T6168] ? clear_bhb_loop+0x40/0x90 [ 93.291562][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.297448][ T6168] RIP: 0033:0x7fede3b9dcab [ 93.301842][ T6168] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 93.321432][ T6168] RSP: 002b:00007fede4a3bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.329833][ T6168] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fede3b9dcab [ 93.337801][ T6168] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 93.345750][ T6168] RBP: 00007fede4a3cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 93.353713][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.361661][ T6168] R13: 00002000000003c0 R14: 0000000000000000 R15: 0000000000000000 [ 93.369619][ T6168] [ 93.372621][ T6168] Modules linked in: [ 93.376984][ T6168] ---[ end trace 0000000000000000 ]--- [ 93.421346][ T6168] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 93.428087][ T6168] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 93.450554][ T6168] RSP: 0018:ffffc90005a3fb48 EFLAGS: 00010246 [ 93.456899][ T6168] RAX: dffffc0000000000 RBX: ffff88802aadcc00 RCX: ffffc90005ca1000 [ 93.467339][ T6168] RDX: 0000000000000000 RSI: ffffffff87d0e8b7 RDI: ffff88802aadd290 [ 93.475530][ T6168] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 93.483758][ T6168] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888025d10050 [ 93.496617][ T6168] R13: 0000000000000000 R14: ffff88802bc624f1 R15: ffff88802bc62008 [ 93.504689][ T6168] FS: 00007fede4a3e6c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 93.518963][ T6168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.526865][ T6168] CR2: 00007fe5ab2aeff8 CR3: 00000000569a9000 CR4: 00000000003526f0 [ 93.534985][ T6168] Kernel panic - not syncing: Fatal exception [ 93.541152][ T6168] Kernel Offset: disabled [ 93.545457][ T6168] Rebooting in 86400 seconds..