last executing test programs: 11.200151988s ago: executing program 1 (id=44): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@generic={0xb4521a883191a2a6, "019d51237f6049dbb7ba1ad5c72e28faaa62ed2a913e6425c7408d471d5803768b5a159650dc0e51d14ed0e3842e05f511f5691ff8fe2338e85a35890543365df89bbc689db3603b7f523dad8d0e68811830b5637aa07c0bd1592ffda69d93f33cf9bbb119544d38e1ee137104c4d2c5d9060672fbf0545e416a983341fd"}, 0x80, 0x0}, 0x4c810) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0xfffe}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0xfffffffc, 0x0, 0x2, 0x2, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x0, 0x70bf27}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) writev(r3, &(0x7f0000000200), 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 9.816033406s ago: executing program 1 (id=48): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x408880, 0x88) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 9.499235259s ago: executing program 2 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 8.943467273s ago: executing program 2 (id=53): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$vcs(0xffffff9c, 0x0, 0x241, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.933791544s ago: executing program 4 (id=54): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="adfb0716972a00b0c7cee8f75f187ea535ec031b5f4411fb29fb28cbbdbb6785ee358f8b6be9c5eb71fad369ae708a2e82551770e741ffa9d402c7d3c1b897ba1764e033e120836277986d36b8ae4e88707f5e7eb9fb8695bf806cb935130883b8be31aca6bb9b79d07a11edda866799ef4b81f51da50c7a349133ec77312ab44239fec50d25356396122a26d7fd8167ab1853a424f36ec90f2a19f5d9a9834d076d8fa8576a7d9ffc82623e618095dec6edd3f8bc3194bd431ca304b3090f9a34bcd6ec86d1e8649b6f714dd4ffde130a32acc91e9cdafc79d86142dc3e5d", 0xdf, 0xfffffffffffffff8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="8a12ae642c", 0x5}, {&(0x7f00000005c0)='c', 0x1}], 0x2}], 0x1, 0x4001) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="5a0bcd637c45d2bb5ea51f5b6db007c4610f47b48ef912569a98d2af2b562b474b1fd08bec948b5ef5677f28bf5d4e2d6c022d1a7ba7307357f2d7388555663738de02888eabdc1bff2e83be2beaebb82f0fc832d324f71d1bb966a87b66a767ff2ea55b91fc7ce2216d9398d128ea08", 0x70, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r5, r5}, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 8.609447898s ago: executing program 3 (id=56): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 8.470526311s ago: executing program 1 (id=57): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000140)='pstore\x00', 0x1) fsmount(r0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000001500)=""/4080, 0xff0) 8.445294969s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) 7.338224888s ago: executing program 4 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 6.123078856s ago: executing program 4 (id=62): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x204002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 5.767486194s ago: executing program 2 (id=63): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2040, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 5.756218324s ago: executing program 0 (id=64): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 5.635954017s ago: executing program 3 (id=65): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 5.290068789s ago: executing program 1 (id=66): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) socket$unix(0x1, 0x5, 0x0) 3.992169792s ago: executing program 2 (id=67): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x301400) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 3.922823748s ago: executing program 1 (id=68): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$VT_ACTIVATE(r0, 0x4b45, 0x3) 3.875836603s ago: executing program 0 (id=69): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x2000c000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) sendto$l2tp6(r0, &(0x7f0000000000)="11f77cf6a5a85fcb3c95ed218047c8987403f22a74d770aaff56ea4ecc1561c6", 0x20, 0x4000844, &(0x7f0000000040)={0xa, 0x0, 0x5, @remote, 0xa6, 0x1}, 0x20) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) 3.617594252s ago: executing program 3 (id=70): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x7fffff, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) 3.320658905s ago: executing program 0 (id=71): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e5", 0x82}], 0x3}, 0x0) 2.92816968s ago: executing program 3 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 2.516178457s ago: executing program 2 (id=73): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, &(0x7f0000000040)) 2.479271509s ago: executing program 4 (id=74): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x4030, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(&(0x7f0000000100), 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.431028852s ago: executing program 0 (id=75): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) rmdir(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x2004000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.250611261s ago: executing program 4 (id=76): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) 1.236623455s ago: executing program 3 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.213969275s ago: executing program 1 (id=78): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 1.153718038s ago: executing program 0 (id=79): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c, 0x0, 0x0, 0x0, 0x3c}, 0x20008b88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecb", 0xd7}], 0x1}, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x8000000}, &(0x7f0000000040)=[0x0], 0x1, 0x0) mkdir(0x0, 0x100) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.076538371s ago: executing program 0 (id=80): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000180)={0xc, 0x3, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 24.176264ms ago: executing program 3 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000180)=ANY=[@ANYBLOB="01001cbd70000000000000000001080023001f334dad50627407a5bb88ad379f64bd66511f3401", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 0s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0xe, "eb87eddb94c3a9e35597e1307b091a89", "1073f3512a2a8ad64dc8412ed7ec85f6"}}}}, 0x27) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) kernel console output (not intermixed with test programs): [ 50.888249][ T29] audit: type=1400 audit(1786088868.333:111): avc: denied { write } for pid=5447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.946859][ T29] audit: type=1400 audit(1786088868.393:112): avc: denied { write } for pid=5458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.360876][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 52.360892][ T29] audit: type=1400 audit(1786088869.803:117): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.404876][ T29] audit: type=1400 audit(1786088869.853:118): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.565068][ T29] audit: type=1400 audit(1786088870.013:119): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.618771][ T29] audit: type=1400 audit(1786088870.063:120): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.786761][ T29] audit: type=1400 audit(1786088870.233:121): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.828372][ T29] audit: type=1400 audit(1786088870.273:122): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.001877][ T29] audit: type=1400 audit(1786088870.443:123): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.047115][ T29] audit: type=1400 audit(1786088870.493:124): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.225410][ T29] audit: type=1400 audit(1786088870.673:125): avc: denied { write } for pid=5546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.267953][ T29] audit: type=1400 audit(1786088870.713:126): avc: denied { write } for pid=5557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 57.402501][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 57.402516][ T29] audit: type=1400 audit(1786088874.853:129): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.432521][ T29] audit: type=1400 audit(1786088874.883:130): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.435415][ T5582] cgroup: Unknown subsys name 'net' [ 57.463566][ T29] audit: type=1400 audit(1786088874.913:131): avc: denied { unmount } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.594565][ T5582] cgroup: Unknown subsys name 'cpuset' [ 57.601960][ T5582] cgroup: Unknown subsys name 'rlimit' [ 57.711167][ T29] audit: type=1400 audit(1786088875.153:132): avc: denied { setattr } for pid=5582 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.735311][ T29] audit: type=1400 audit(1786088875.153:133): avc: denied { create } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.759441][ T29] audit: type=1400 audit(1786088875.153:134): avc: denied { write } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.780152][ T29] audit: type=1400 audit(1786088875.153:135): avc: denied { read } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.800664][ T29] audit: type=1400 audit(1786088875.153:136): avc: denied { mounton } for pid=5582 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.825558][ T29] audit: type=1400 audit(1786088875.153:137): avc: denied { mount } for pid=5582 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.866838][ T5584] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.875986][ T29] audit: type=1400 audit(1786088875.323:138): avc: denied { relabelto } for pid=5584 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.798228][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.151352][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.164314][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.178266][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.186850][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.194497][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.202684][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.211477][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.212743][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.227432][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.234810][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.243356][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.245703][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.251140][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.259972][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.272024][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.273019][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.286458][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.288013][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.303653][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.310871][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.318391][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.319748][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.327120][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.335652][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.340697][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.500101][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.507276][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.516102][ T5597] bridge_slave_0: entered allmulticast mode [ 63.525277][ T5597] bridge_slave_0: entered promiscuous mode [ 63.554572][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.561695][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.568872][ T5597] bridge_slave_1: entered allmulticast mode [ 63.575618][ T5597] bridge_slave_1: entered promiscuous mode [ 63.676803][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.696449][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.703746][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.710841][ T5598] bridge_slave_0: entered allmulticast mode [ 63.717834][ T5598] bridge_slave_0: entered promiscuous mode [ 63.731790][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.757079][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.764535][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.771629][ T5598] bridge_slave_1: entered allmulticast mode [ 63.778463][ T5598] bridge_slave_1: entered promiscuous mode [ 63.785010][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.792059][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.799593][ T5606] bridge_slave_0: entered allmulticast mode [ 63.806319][ T5606] bridge_slave_0: entered promiscuous mode [ 63.840571][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.847701][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.855117][ T5606] bridge_slave_1: entered allmulticast mode [ 63.861767][ T5606] bridge_slave_1: entered promiscuous mode [ 63.869599][ T5597] team0: Port device team_slave_0 added [ 63.878103][ T5597] team0: Port device team_slave_1 added [ 63.890552][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.897790][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.905164][ T5609] bridge_slave_0: entered allmulticast mode [ 63.911850][ T5609] bridge_slave_0: entered promiscuous mode [ 63.941064][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.948303][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.955632][ T5609] bridge_slave_1: entered allmulticast mode [ 63.962341][ T5609] bridge_slave_1: entered promiscuous mode [ 63.976181][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.998056][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.005083][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.031046][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.056797][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.068162][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.077799][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.084860][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.110859][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.127520][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.134733][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.141823][ T5593] bridge_slave_0: entered allmulticast mode [ 64.148681][ T5593] bridge_slave_0: entered promiscuous mode [ 64.164471][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.180728][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.190298][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.197533][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.204709][ T5593] bridge_slave_1: entered allmulticast mode [ 64.211595][ T5593] bridge_slave_1: entered promiscuous mode [ 64.239393][ T5606] team0: Port device team_slave_0 added [ 64.246486][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.266253][ T5598] team0: Port device team_slave_0 added [ 64.274068][ T5598] team0: Port device team_slave_1 added [ 64.280674][ T5606] team0: Port device team_slave_1 added [ 64.331897][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.353666][ T5608] Bluetooth: hci1: command tx timeout [ 64.353667][ T5603] Bluetooth: hci0: command tx timeout [ 64.356427][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.371618][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.397714][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.409989][ T5609] team0: Port device team_slave_0 added [ 64.417367][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.430430][ T5597] hsr_slave_0: entered promiscuous mode [ 64.432899][ T5603] Bluetooth: hci3: command tx timeout [ 64.436307][ T5608] Bluetooth: hci2: command tx timeout [ 64.442280][ T5603] Bluetooth: hci4: command tx timeout [ 64.448477][ T5597] hsr_slave_1: entered promiscuous mode [ 64.459772][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.466834][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.492799][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.504130][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.511131][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.537536][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.549881][ T5609] team0: Port device team_slave_1 added [ 64.574490][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.581498][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.607460][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.637614][ T5593] team0: Port device team_slave_0 added [ 64.645063][ T5593] team0: Port device team_slave_1 added [ 64.657514][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.664632][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.691220][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.726979][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.734015][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.760049][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.794391][ T5606] hsr_slave_0: entered promiscuous mode [ 64.800394][ T5606] hsr_slave_1: entered promiscuous mode [ 64.806432][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 64.812183][ T5606] Cannot create hsr debugfs directory [ 64.827290][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.834253][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.860303][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.882668][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.889807][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.916443][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.936232][ T5598] hsr_slave_0: entered promiscuous mode [ 64.942769][ T5598] hsr_slave_1: entered promiscuous mode [ 64.948769][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 64.954623][ T5598] Cannot create hsr debugfs directory [ 64.986622][ T5609] hsr_slave_0: entered promiscuous mode [ 64.992752][ T5609] hsr_slave_1: entered promiscuous mode [ 64.998585][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 65.004447][ T5609] Cannot create hsr debugfs directory [ 65.094775][ T5593] hsr_slave_0: entered promiscuous mode [ 65.100786][ T5593] hsr_slave_1: entered promiscuous mode [ 65.106896][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 65.112710][ T5593] Cannot create hsr debugfs directory [ 65.373441][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.386305][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.404180][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.413561][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.421094][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.430725][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.445724][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.454629][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.493422][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.505446][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.513992][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.522882][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.535726][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.544756][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.560529][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.569051][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.619626][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.629151][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.637992][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.647522][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.661607][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.671972][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.683260][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.692969][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.770391][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.780079][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.788695][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.794525][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.802078][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.804349][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.816435][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.824944][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.833661][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.841780][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.859449][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.928540][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.940879][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.950781][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.958820][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.967996][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.979954][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.988499][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.996463][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.005088][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.018398][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.025752][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.044049][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.068038][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.075165][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.107986][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.129009][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.136148][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.160656][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.170976][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.178094][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.230035][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.258184][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.265303][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.277267][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.302172][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.309352][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.329747][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.354737][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 66.354751][ T29] audit: type=1400 audit(1786088883.803:152): avc: denied { sys_module } for pid=5597 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.395325][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.404795][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.411871][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.431724][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.442455][ T5603] Bluetooth: hci0: command tx timeout [ 66.442490][ T5603] Bluetooth: hci1: command tx timeout [ 66.467250][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.474409][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.515496][ T5610] Bluetooth: hci4: command tx timeout [ 66.522644][ T5610] Bluetooth: hci2: command tx timeout [ 66.522763][ T5603] Bluetooth: hci3: command tx timeout [ 66.551683][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.598320][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.605483][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.639202][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.646361][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.155997][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.264485][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.306471][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.369878][ T5597] veth0_vlan: entered promiscuous mode [ 67.406996][ T5597] veth1_vlan: entered promiscuous mode [ 67.461256][ T5609] veth0_vlan: entered promiscuous mode [ 67.524215][ T5609] veth1_vlan: entered promiscuous mode [ 67.543258][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.570823][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.586916][ T5597] veth0_macvtap: entered promiscuous mode [ 67.610282][ T5597] veth1_macvtap: entered promiscuous mode [ 67.646168][ T5609] veth0_macvtap: entered promiscuous mode [ 67.658451][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.669612][ T5609] veth1_macvtap: entered promiscuous mode [ 67.687834][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.716992][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.747792][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.764025][ T5593] veth0_vlan: entered promiscuous mode [ 67.779248][ T5606] veth0_vlan: entered promiscuous mode [ 67.803736][ T5598] veth0_vlan: entered promiscuous mode [ 67.816513][ T5593] veth1_vlan: entered promiscuous mode [ 67.841487][ T5606] veth1_vlan: entered promiscuous mode [ 67.858207][ T5598] veth1_vlan: entered promiscuous mode [ 67.921340][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.931890][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.962145][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.965190][ T5593] veth0_macvtap: entered promiscuous mode [ 67.971981][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.015297][ T5593] veth1_macvtap: entered promiscuous mode [ 68.024140][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.030104][ T5606] veth0_macvtap: entered promiscuous mode [ 68.037206][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.060563][ T5598] veth0_macvtap: entered promiscuous mode [ 68.072737][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.081177][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.085271][ T29] audit: type=1400 audit(1786088885.523:153): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.CeeEcr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.113173][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.113353][ T29] audit: type=1400 audit(1786088885.533:154): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.121594][ T5606] veth1_macvtap: entered promiscuous mode [ 68.150690][ T29] audit: type=1400 audit(1786088885.533:155): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.CeeEcr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.163876][ T5598] veth1_macvtap: entered promiscuous mode [ 68.178856][ T29] audit: type=1400 audit(1786088885.543:156): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.206763][ T29] audit: type=1400 audit(1786088885.543:157): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.CeeEcr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.240631][ T29] audit: type=1400 audit(1786088885.543:158): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.CeeEcr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.249974][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.268677][ T29] audit: type=1400 audit(1786088885.543:159): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.299372][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.314603][ T29] audit: type=1400 audit(1786088885.593:160): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.338871][ T29] audit: type=1400 audit(1786088885.593:161): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="gadgetfs" ino=7015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.363618][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.375353][ T5597] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.402792][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.414184][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.429814][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.464652][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.512969][ T5603] Bluetooth: hci1: command tx timeout [ 68.516410][ T5610] Bluetooth: hci0: command tx timeout [ 68.573836][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.593288][ T5610] Bluetooth: hci3: command tx timeout [ 68.597349][ T5603] Bluetooth: hci2: command tx timeout [ 68.598705][ T5608] Bluetooth: hci4: command tx timeout [ 68.693235][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.707936][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.760014][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.770557][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.786630][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.839818][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.849699][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.878984][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.885943][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.894822][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.958699][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.983145][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.017900][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.026960][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.064601][ T3353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.094370][ T3353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.143962][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.179613][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.222773][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.244532][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.342776][ T3353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.373796][ T3353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.378584][ T5804] loop0: detected capacity change from 0 to 128 [ 69.442328][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.522895][ T1042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.557595][ T5808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.558253][ T1042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.612729][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.639864][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.653261][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.687542][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.849508][ T5610] Bluetooth: hci0: command tx timeout [ 70.855248][ T5610] Bluetooth: hci1: command tx timeout [ 70.875871][ T5610] Bluetooth: hci2: command tx timeout [ 70.881440][ T5610] Bluetooth: hci4: command tx timeout [ 70.886946][ T5610] Bluetooth: hci3: command tx timeout [ 71.050430][ T5836] Zero length message leads to an empty skb [ 71.178951][ T5838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.182893][ T5687] libceph: connect (1)[c::]:6789 error -101 [ 71.207544][ T5845] CIFS: Attempting to mount //127.0.0.1/share [ 71.231178][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 71.257004][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 71.266268][ T5687] libceph: mon0 (1)[c::]:6789 connect error [ 71.283379][ T5837] ceph: No mds server is up or the cluster is laggy [ 71.316465][ T5838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.330442][ T57] wlan1: authenticated [ 71.358116][ T1042] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 71.443165][ T5852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.456135][ T1042] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 71.515776][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 71.515805][ T29] audit: type=1400 audit(1786088888.963:203): avc: denied { getopt } for pid=5847 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.569674][ T5687] libceph: connect (1)[c::]:6789 error -101 [ 71.629438][ T5687] libceph: mon0 (1)[c::]:6789 connect error [ 71.654441][ T5854] syzkaller0: entered promiscuous mode [ 71.693820][ T5854] syzkaller0: entered allmulticast mode [ 71.840747][ T1042] wlan1: associated [ 71.908487][ T5845] CIFS: VFS: cifs_mount failed w/return code = -512 [ 72.050934][ T29] audit: type=1400 audit(1786088889.493:204): avc: denied { ioctl } for pid=5859 comm="syz.0.21" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.081084][ T5858] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 72.115657][ T29] audit: type=1400 audit(1786088889.543:205): avc: denied { create } for pid=5859 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.140172][ T29] audit: type=1400 audit(1786088889.543:206): avc: denied { connect } for pid=5859 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.248890][ T5864] capability: warning: `syz.2.22' uses deprecated v2 capabilities in a way that may be insecure [ 72.263538][ T29] audit: type=1400 audit(1786088889.703:207): avc: denied { map_create } for pid=5863 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.307679][ T29] audit: type=1400 audit(1786088889.733:208): avc: denied { map_read map_write } for pid=5863 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.402522][ T9] IPVS: starting estimator thread 0... [ 72.408491][ T29] audit: type=1400 audit(1786088889.843:209): avc: denied { setopt } for pid=5865 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.450926][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 72.487276][ T5866] netlink: 17 bytes leftover after parsing attributes in process `syz.3.23'. [ 72.500083][ T29] audit: type=1400 audit(1786088889.943:210): avc: denied { name_bind } for pid=5868 comm="syz.4.24" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.558070][ T5866] tipc: Invalid UDP bearer configuration [ 72.558116][ T5866] tipc: Enabling of bearer rejected, failed to enable media [ 72.576819][ T29] audit: type=1400 audit(1786088889.963:211): avc: denied { read write } for pid=5868 comm="syz.4.24" name="ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.600476][ T5867] IPVS: using max 51 ests per chain, 122400 per kthread [ 72.617525][ T29] audit: type=1400 audit(1786088889.963:212): avc: denied { open } for pid=5868 comm="syz.4.24" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.792881][ T5878] ======================================================= [ 72.792881][ T5878] WARNING: The mand mount option has been deprecated and [ 72.792881][ T5878] and is ignored by this kernel. Remove the mand [ 72.792881][ T5878] option from the mount to silence this warning. [ 72.792881][ T5878] ======================================================= [ 72.923603][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 72.965581][ T5785] kernel write not supported for file [eventfd] (pid: 5785 comm: kworker/1:7) [ 74.135216][ T5899] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 76.466503][ T5922] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 76.601237][ T5925] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 76.648806][ T5927] netlink: 'syz.2.42': attribute type 4 has an invalid length. [ 76.683536][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 76.683553][ T29] audit: type=1400 audit(1786088894.133:255): avc: denied { create } for pid=5928 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.844665][ T29] audit: type=1400 audit(1786088894.163:256): avc: denied { write } for pid=5928 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.115287][ T29] audit: type=1400 audit(1786088894.163:257): avc: denied { create } for pid=5928 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.207850][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036786400: rx timeout, send abort [ 77.209093][ T5936] netlink: 'syz.2.42': attribute type 4 has an invalid length. [ 77.410239][ T29] audit: type=1400 audit(1786088894.173:258): avc: denied { write } for pid=5928 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.637689][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 77.657679][ T29] audit: type=1400 audit(1786088894.173:259): avc: denied { nlmsg_write } for pid=5928 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.716876][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036786400: abort rx timeout. Force session deactivation [ 77.782284][ T29] audit: type=1400 audit(1786088894.233:260): avc: denied { read write } for pid=5928 comm="syz.1.44" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.793506][ T5938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5938 comm=syz.0.45 [ 77.842383][ T29] audit: type=1400 audit(1786088894.233:261): avc: denied { open } for pid=5928 comm="syz.1.44" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.893429][ T29] audit: type=1400 audit(1786088894.263:262): avc: denied { map } for pid=5928 comm="syz.1.44" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.916723][ T29] audit: type=1400 audit(1786088894.603:263): avc: denied { ioctl } for pid=5928 comm="syz.1.44" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.943174][ T29] audit: type=1400 audit(1786088894.673:264): avc: denied { read } for pid=4947 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 78.710096][ T5956] binder_alloc: 5954: pid 5954 spamming oneway? 1 buffers allocated for a total size of 4096 [ 79.335047][ T5969] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 79.735677][ T5978] No such timeout policy "syz1" [ 80.268662][ T5977] bridge1: entered promiscuous mode [ 81.815427][ T982] cfg80211: failed to load regulatory.db [ 83.936815][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 83.936834][ T29] audit: type=1400 audit(1786088901.383:302): avc: denied { create } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.010168][ T29] audit: type=1400 audit(1786088901.423:303): avc: denied { bind } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.010212][ T29] audit: type=1400 audit(1786088901.423:304): avc: denied { create } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.010244][ T29] audit: type=1400 audit(1786088901.423:305): avc: denied { connect } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.010278][ T29] audit: type=1400 audit(1786088901.433:306): avc: denied { write } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.010312][ T29] audit: type=1400 audit(1786088901.433:307): avc: denied { write } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.053380][ T29] audit: type=1400 audit(1786088901.483:308): avc: denied { read } for pid=6013 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.053430][ T29] audit: type=1400 audit(1786088901.493:309): avc: denied { create } for pid=6011 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.197624][ T29] audit: type=1400 audit(1786088901.633:310): avc: denied { append } for pid=6013 comm="syz.0.69" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.378504][ T29] audit: type=1400 audit(1786088901.823:311): avc: denied { connect } for pid=6011 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.993288][ T6028] syzkaller0: entered promiscuous mode [ 84.993310][ T6028] syzkaller0: entered allmulticast mode [ 86.932334][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1034 jiffies old. [ 87.771802][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 87.869263][ T6054] binfmt_misc: register: failed to install interpreter file ./file1 [ 87.924237][ T3291] ------------[ cut here ]------------ [ 87.924251][ T3291] !sta [ 87.924258][ T3291] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x3dd/0x4b0, CPU#0: kworker/u8:10/3291 [ 87.924293][ T3291] Modules linked in: [ 87.924330][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 87.924351][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.924364][ T3291] Workqueue: events_unbound cfg80211_wiphy_work [ 87.924394][ T3291] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.924421][ T3291] Code: 00 31 ff 41 89 c5 89 c6 e8 80 43 c0 f6 45 85 ed 0f 85 ad fc ff ff e8 02 49 c0 f6 90 0f 0b 90 e9 9f fc ff ff e8 f4 48 c0 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 a4 c1 21 91 e8 cf d2 30 f7 e9 5f [ 87.924439][ T3291] RSP: 0018:ffffc9000ddcfb60 EFLAGS: 00010293 [ 87.924454][ T3291] RAX: 0000000000000000 RBX: ffff888056494ec0 RCX: ffffc9000ddcfafc [ 87.924467][ T3291] RDX: ffff88803389ca80 RSI: ffffffff8b4a1bec RDI: ffff88803389cf44 [ 87.924480][ T3291] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.924491][ T3291] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056495920 [ 87.924503][ T3291] R13: ffff888056496cc2 R14: 0000000000000001 R15: 0000000000000000 [ 87.924515][ T3291] FS: 0000000000000000(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 87.924533][ T3291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.924546][ T3291] CR2: 00007fee41b556c8 CR3: 000000005be53000 CR4: 00000000003526f0 [ 87.924559][ T3291] Call Trace: [ 87.924566][ T3291] [ 87.924578][ T3291] ieee80211_mgd_probe_ap+0x35e/0x420 [ 87.924601][ T3291] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 87.924625][ T3291] cfg80211_wiphy_work+0x2b7/0x550 [ 87.924657][ T3291] process_one_work+0xa23/0x1940 [ 87.924692][ T3291] ? __pfx_process_one_work+0x10/0x10 [ 87.924721][ T3291] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.924753][ T3291] worker_thread+0x5ef/0xe50 [ 87.924785][ T3291] ? kthread+0x13a/0x450 [ 87.924803][ T3291] ? __pfx_worker_thread+0x10/0x10 [ 87.924822][ T3291] kthread+0x370/0x450 [ 87.924840][ T3291] ? __pfx_kthread+0x10/0x10 [ 87.924860][ T3291] ret_from_fork+0x72b/0xd50 [ 87.924888][ T3291] ? __pfx_ret_from_fork+0x10/0x10 [ 87.924915][ T3291] ? __switch_to+0x800/0x10f0 [ 87.924936][ T3291] ? __pfx_kthread+0x10/0x10 [ 87.924956][ T3291] ret_from_fork_asm+0x1a/0x30 [ 87.924997][ T3291] [ 87.925007][ T3291] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.925017][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 87.925037][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.925048][ T3291] Workqueue: events_unbound cfg80211_wiphy_work [ 87.925075][ T3291] Call Trace: [ 87.925081][ T3291] [ 87.925088][ T3291] dump_stack_lvl+0x100/0x190 [ 87.925111][ T3291] vpanic+0x552/0x970 [ 87.925130][ T3291] ? __pfx_vpanic+0x10/0x10 [ 87.925155][ T3291] panic+0xd1/0xe0 [ 87.925172][ T3291] ? __pfx_panic+0x10/0x10 [ 87.925197][ T3291] ? check_panic_on_warn+0x1f/0x90 [ 87.925218][ T3291] check_panic_on_warn.cold+0x19/0x34 [ 87.925238][ T3291] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.925256][ T3291] __warn.cold+0x191/0x318 [ 87.925276][ T3291] __report_bug+0x30f/0x440 [ 87.925296][ T3291] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.925315][ T3291] ? __pfx___report_bug+0x10/0x10 [ 87.925335][ T3291] ? do_raw_spin_lock+0x128/0x260 [ 87.925361][ T3291] ? find_held_lock+0x2b/0x80 [ 87.925383][ T3291] ? __lock_acquire+0x49f/0x1a40 [ 87.925407][ T3291] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.925434][ T3291] report_bug+0xb2/0x220 [ 87.925455][ T3291] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.925475][ T3291] handle_bug+0x16a/0x2a0 [ 87.925502][ T3291] exc_invalid_op+0x17/0x50 [ 87.925528][ T3291] asm_exc_invalid_op+0x1a/0x20 [ 87.925546][ T3291] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.925566][ T3291] Code: 00 31 ff 41 89 c5 89 c6 e8 80 43 c0 f6 45 85 ed 0f 85 ad fc ff ff e8 02 49 c0 f6 90 0f 0b 90 e9 9f fc ff ff e8 f4 48 c0 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 a4 c1 21 91 e8 cf d2 30 f7 e9 5f [ 87.925582][ T3291] RSP: 0018:ffffc9000ddcfb60 EFLAGS: 00010293 [ 87.925596][ T3291] RAX: 0000000000000000 RBX: ffff888056494ec0 RCX: ffffc9000ddcfafc [ 87.925608][ T3291] RDX: ffff88803389ca80 RSI: ffffffff8b4a1bec RDI: ffff88803389cf44 [ 87.925620][ T3291] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.925630][ T3291] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056495920 [ 87.925641][ T3291] R13: ffff888056496cc2 R14: 0000000000000001 R15: 0000000000000000 [ 87.925661][ T3291] ? ieee80211_mgd_probe_ap_send+0x3dc/0x4b0 [ 87.925687][ T3291] ieee80211_mgd_probe_ap+0x35e/0x420 [ 87.925708][ T3291] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 87.925730][ T3291] cfg80211_wiphy_work+0x2b7/0x550 [ 87.925761][ T3291] process_one_work+0xa23/0x1940 [ 87.925791][ T3291] ? __pfx_process_one_work+0x10/0x10 [ 87.925819][ T3291] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.925850][ T3291] worker_thread+0x5ef/0xe50 [ 87.925880][ T3291] ? kthread+0x13a/0x450 [ 87.925896][ T3291] ? __pfx_worker_thread+0x10/0x10 [ 87.925914][ T3291] kthread+0x370/0x450 [ 87.925931][ T3291] ? __pfx_kthread+0x10/0x10 [ 87.925951][ T3291] ret_from_fork+0x72b/0xd50 [ 87.925978][ T3291] ? __pfx_ret_from_fork+0x10/0x10 [ 87.926005][ T3291] ? __switch_to+0x800/0x10f0 [ 87.926024][ T3291] ? __pfx_kthread+0x10/0x10 [ 87.926044][ T3291] ret_from_fork_asm+0x1a/0x30 [ 87.926084][ T3291] [ 87.926293][ T3291] Kernel Offset: disabled