last executing test programs: 1m0.94575208s ago: executing program 2 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) 59.969329574s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) iopl(0x3) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r8, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) finit_module(r5, 0x0, 0x3) r9 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400, 0xfffffffd}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 59.279983644s ago: executing program 2 (id=9): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x119) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x88400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) tkill(r0, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) 37.376049458s ago: executing program 2 (id=9): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x119) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x88400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) tkill(r0, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) 32.147992864s ago: executing program 4 (id=82): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="c50f2abd7000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="ac562d1a4fe9152e560222799413b86b5a9140f945969fa08cbb5f560fcbf3d8f76200407e395977c2ca564a6b4c5b7a02faf31799357b01c5387718b244d28fea41001f2dff64942b86fd4f0c2471d65899c6294e1ac52bc918cd3919255af0"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) getitimer(0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x1003, 0x40000000, 0x0, 0x0, 0x2a4d, 0x4]}}, 0x5c) 29.89507142s ago: executing program 4 (id=89): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000380)=""/204, 0xcc}], 0x1, 0x1ff, 0x5) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, r8, 0x100, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6) fanotify_mark(0xffffffffffffffff, 0x8, 0x10, r9, &(0x7f00000001c0)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.988139402s ago: executing program 0 (id=99): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="c50f2abd7000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="ac562d1a4fe9152e560222799413b86b5a9140f945969fa08cbb5f560fcbf3d8f76200407e395977c2ca564a6b4c5b7a02faf31799357b01c5387718b244d28fea41001f2dff64942b86fd4f0c2471d65899c6294e1ac52bc918cd3919255af0"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) getitimer(0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x1003, 0x40000000, 0x0, 0x0, 0x2a4d, 0x4]}}, 0x5c) 25.883870164s ago: executing program 4 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) 24.556048663s ago: executing program 4 (id=104): io_setup(0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, 0x0, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) 22.580093519s ago: executing program 4 (id=108): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 20.500209444s ago: executing program 0 (id=112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 19.378208961s ago: executing program 0 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) 18.228022125s ago: executing program 0 (id=116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x7fffffffffffe}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, 0xfffffffffffffffc) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d04, &(0x7f0000000300)=0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 17.496107355s ago: executing program 2 (id=9): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x119) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x88400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) tkill(r0, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) 16.898151191s ago: executing program 0 (id=120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 16.636450816s ago: executing program 3 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa49) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe85) rt_tgsigqueueinfo(r1, r1, 0x23, &(0x7f0000000040)={0x23, 0x3, 0x1}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) 15.659880035s ago: executing program 3 (id=123): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="c50f2abd7000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="ac562d1a4fe9152e560222799413b86b5a9140f945969fa08cbb5f560fcbf3d8f76200407e395977c2ca564a6b4c5b7a02faf31799357b01c5387718b244d28fea41001f2dff64942b86fd4f0c2471d65899c6294e1ac52bc918cd3919255af0ad5c6291867548d169679ebaf996c9c2"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) getitimer(0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x1003, 0x40000000, 0x0, 0x0, 0x2a4d, 0x4]}}, 0x5c) 14.61219539s ago: executing program 3 (id=126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) 13.692789593s ago: executing program 3 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 13.448627292s ago: executing program 3 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0xf0}, 0x20) 4.830955996s ago: executing program 1 (id=135): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 4.661456821s ago: executing program 1 (id=136): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="c50f2abd7000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="ac562d1a4fe9152e560222799413b86b5a9140f945969fa08cbb5f560fcbf3d8f76200407e395977c2ca564a6b4c5b7a02faf31799357b01c5387718b244d28f"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) getitimer(0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x1003, 0x40000000, 0x0, 0x0, 0x2a4d, 0x4]}}, 0x5c) 4.322824001s ago: executing program 4 (id=108): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 3.800867976s ago: executing program 2 (id=9): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x119) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x88400) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) tkill(r0, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) 2.818065826s ago: executing program 0 (id=120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2.555032191s ago: executing program 1 (id=137): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r0, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="c50f2abd7000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="ac562d1a4fe9152e560222799413b86b5a9140f945969fa08cbb5f560fcbf3d8f76200407e395977c2ca564a6b4c5b7a02faf31799357b01c5387718b244d28fea41001f2dff64942b86fd4f0c2471d65899c6294e1ac52bc918cd3919255af0ad5c6291867548d169679ebaf996c9c2"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) timer_create(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) getitimer(0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xffffffff}, 0xfffd, {[0x0, 0x0, 0x1003, 0x40000000, 0x0, 0x0, 0x2a4d, 0x4]}}, 0x5c) 1.299712021s ago: executing program 1 (id=138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) 439.401187ms ago: executing program 3 (id=129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0xf0}, 0x20) 182.364206ms ago: executing program 1 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x10) 0s ago: executing program 1 (id=140): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) kernel console output (not intermixed with test programs): d=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.419486][ T30] audit: type=1400 audit(1746253086.091:92): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.444867][ T30] audit: type=1400 audit(1746253086.091:93): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.465441][ T30] audit: type=1400 audit(1746253086.091:94): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.485955][ T30] audit: type=1400 audit(1746253086.111:95): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.489647][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.511135][ T30] audit: type=1400 audit(1746253086.111:96): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.542960][ T30] audit: type=1400 audit(1746253086.121:97): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.400162][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.715485][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.723175][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.732608][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.751411][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.759413][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.762050][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.766739][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.781178][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.788901][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.789600][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.796237][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.810803][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.814109][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.825579][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.833911][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.841470][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.845364][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.849318][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.865525][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.865953][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.873889][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.880162][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.887196][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.902142][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.912661][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.197316][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 62.197330][ T30] audit: type=1400 audit(1746253090.891:110): avc: denied { module_request } for pid=5818 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.268577][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 62.319830][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 62.415840][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.515356][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.523049][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.530224][ T5818] bridge_slave_0: entered allmulticast mode [ 62.538249][ T5818] bridge_slave_0: entered promiscuous mode [ 62.549778][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.556900][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.564015][ T5818] bridge_slave_1: entered allmulticast mode [ 62.570730][ T5818] bridge_slave_1: entered promiscuous mode [ 62.577543][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.584769][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.592168][ T5807] bridge_slave_0: entered allmulticast mode [ 62.598702][ T5807] bridge_slave_0: entered promiscuous mode [ 62.605343][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 62.615237][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.622466][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.629548][ T5807] bridge_slave_1: entered allmulticast mode [ 62.636337][ T5807] bridge_slave_1: entered promiscuous mode [ 62.649847][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 62.710456][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.744616][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.766063][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.777528][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.849948][ T5818] team0: Port device team_slave_0 added [ 62.871134][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.878237][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.886050][ T5820] bridge_slave_0: entered allmulticast mode [ 62.892773][ T5820] bridge_slave_0: entered promiscuous mode [ 62.904309][ T5818] team0: Port device team_slave_1 added [ 62.920116][ T5807] team0: Port device team_slave_0 added [ 62.933686][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.940778][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.947956][ T5820] bridge_slave_1: entered allmulticast mode [ 62.955142][ T5820] bridge_slave_1: entered promiscuous mode [ 62.988052][ T5807] team0: Port device team_slave_1 added [ 63.001046][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.008221][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.015851][ T5809] bridge_slave_0: entered allmulticast mode [ 63.022841][ T5809] bridge_slave_0: entered promiscuous mode [ 63.044464][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.052708][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.078911][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.092232][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.099167][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.125116][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.136562][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.143777][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.150879][ T5814] bridge_slave_0: entered allmulticast mode [ 63.157619][ T5814] bridge_slave_0: entered promiscuous mode [ 63.170655][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.177910][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.185161][ T5809] bridge_slave_1: entered allmulticast mode [ 63.191898][ T5809] bridge_slave_1: entered promiscuous mode [ 63.200311][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.213268][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.227119][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.234530][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.241882][ T5814] bridge_slave_1: entered allmulticast mode [ 63.248461][ T5814] bridge_slave_1: entered promiscuous mode [ 63.257329][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.264281][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.290196][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.331817][ T5820] team0: Port device team_slave_0 added [ 63.346379][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.353398][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.379598][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.406619][ T5820] team0: Port device team_slave_1 added [ 63.435704][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.462018][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.473447][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.493240][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.505760][ T5818] hsr_slave_0: entered promiscuous mode [ 63.512805][ T5818] hsr_slave_1: entered promiscuous mode [ 63.519761][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.526859][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.552833][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.564790][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.571757][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.597701][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.637104][ T5814] team0: Port device team_slave_0 added [ 63.669064][ T5814] team0: Port device team_slave_1 added [ 63.685316][ T5809] team0: Port device team_slave_0 added [ 63.697389][ T5809] team0: Port device team_slave_1 added [ 63.706316][ T5807] hsr_slave_0: entered promiscuous mode [ 63.712448][ T5807] hsr_slave_1: entered promiscuous mode [ 63.718260][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.725976][ T5807] Cannot create hsr debugfs directory [ 63.768812][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.775903][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.801886][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.836124][ T5820] hsr_slave_0: entered promiscuous mode [ 63.843021][ T5820] hsr_slave_1: entered promiscuous mode [ 63.848970][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.856950][ T5820] Cannot create hsr debugfs directory [ 63.872419][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.879341][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.905575][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.905651][ T5125] Bluetooth: hci1: command tx timeout [ 63.928858][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.935897][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.961822][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.972592][ T5125] Bluetooth: hci2: command tx timeout [ 63.972614][ T5815] Bluetooth: hci0: command tx timeout [ 63.980548][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.983579][ T5815] Bluetooth: hci3: command tx timeout [ 63.983655][ T5815] Bluetooth: hci4: command tx timeout [ 63.991454][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.028082][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.111316][ T5814] hsr_slave_0: entered promiscuous mode [ 64.117267][ T5814] hsr_slave_1: entered promiscuous mode [ 64.123599][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.131138][ T5814] Cannot create hsr debugfs directory [ 64.197738][ T5809] hsr_slave_0: entered promiscuous mode [ 64.204386][ T5809] hsr_slave_1: entered promiscuous mode [ 64.210174][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.218100][ T5809] Cannot create hsr debugfs directory [ 64.444810][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.464405][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.474711][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.483607][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.529711][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.539543][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.553789][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.569232][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.615681][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.627595][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.644101][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.663758][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.735262][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.744974][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.755208][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.765233][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.796809][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.833890][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.848187][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.858758][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.875170][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.898077][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.914065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.921240][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.945856][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.952913][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.997666][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.035848][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.063038][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.086204][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.093300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.113032][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.141079][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.160778][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.168928][ T30] audit: type=1400 audit(1746253093.871:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.197345][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.209504][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.226085][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.233174][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.243150][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.250428][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.259881][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.267030][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.355203][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.362354][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.382679][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.389831][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.458870][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.508400][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.529065][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.545333][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.588671][ T5818] veth0_vlan: entered promiscuous mode [ 65.606510][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.628178][ T5818] veth1_vlan: entered promiscuous mode [ 65.657420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.664516][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.697511][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.704652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.746406][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.765557][ T5807] veth0_vlan: entered promiscuous mode [ 65.810001][ T5818] veth0_macvtap: entered promiscuous mode [ 65.820720][ T5818] veth1_macvtap: entered promiscuous mode [ 65.836353][ T5807] veth1_vlan: entered promiscuous mode [ 65.855806][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.887815][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.898370][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.935552][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944971][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956349][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965839][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980258][ T5807] veth0_macvtap: entered promiscuous mode [ 65.990081][ T5815] Bluetooth: hci1: command tx timeout [ 66.015491][ T5807] veth1_macvtap: entered promiscuous mode [ 66.027969][ T5820] veth0_vlan: entered promiscuous mode [ 66.051789][ T5815] Bluetooth: hci3: command tx timeout [ 66.057238][ T5815] Bluetooth: hci0: command tx timeout [ 66.062924][ T56] Bluetooth: hci2: command tx timeout [ 66.065386][ T5125] Bluetooth: hci4: command tx timeout [ 66.092717][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.107015][ T5820] veth1_vlan: entered promiscuous mode [ 66.116456][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.127096][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.139222][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.153052][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.163704][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.174533][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.190151][ T5809] veth0_vlan: entered promiscuous mode [ 66.205643][ T5809] veth1_vlan: entered promiscuous mode [ 66.236236][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.250112][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.258982][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.267837][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.347172][ T5820] veth0_macvtap: entered promiscuous mode [ 66.369742][ T5809] veth0_macvtap: entered promiscuous mode [ 66.385472][ T5820] veth1_macvtap: entered promiscuous mode [ 66.393704][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.395370][ T5809] veth1_macvtap: entered promiscuous mode [ 66.408728][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.460789][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.472352][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.482492][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.494163][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.505069][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.537276][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.548077][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.558520][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.568993][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.579758][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.587526][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.590479][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.604816][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613817][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.621159][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.626539][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.638692][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.647802][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.667071][ T30] audit: type=1400 audit(1746253095.361:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.hvOgDW/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.670131][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.702655][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.713426][ T30] audit: type=1400 audit(1746253095.401:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.718120][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.736713][ T30] audit: type=1400 audit(1746253095.401:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.hvOgDW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.754000][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.782897][ T30] audit: type=1400 audit(1746253095.401:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.784679][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.805645][ T30] audit: type=1400 audit(1746253095.411:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.hvOgDW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.817524][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.845244][ T30] audit: type=1400 audit(1746253095.411:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.hvOgDW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.855014][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.880537][ T30] audit: type=1400 audit(1746253095.411:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.907414][ T30] audit: type=1400 audit(1746253095.591:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.941432][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.960060][ T5814] veth0_vlan: entered promiscuous mode [ 66.970874][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.983288][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993981][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.004708][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.015260][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.026727][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.038537][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.060464][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.085505][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.104041][ T5893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.107907][ T5814] veth1_vlan: entered promiscuous mode [ 67.149250][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.158570][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168565][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.177862][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.227035][ T5893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.235913][ T5893] bond0: (slave bond1): Enslaving as an active interface with an up link [ 67.367893][ T5898] syzkaller1: entered promiscuous mode [ 67.374200][ T5898] syzkaller1: entered allmulticast mode [ 67.384533][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 67.384547][ T30] audit: type=1400 audit(1746253096.081:132): avc: denied { prog_run } for pid=5899 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.425141][ T30] audit: type=1400 audit(1746253096.111:133): avc: denied { read write } for pid=5897 comm="syz.0.1" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.458148][ T30] audit: type=1400 audit(1746253096.111:134): avc: denied { open } for pid=5897 comm="syz.0.1" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.529163][ T30] audit: type=1400 audit(1746253096.211:135): avc: denied { read } for pid=5897 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.012015][ T30] audit: type=1400 audit(1746253096.211:136): avc: denied { open } for pid=5897 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.038315][ T5814] veth0_macvtap: entered promiscuous mode [ 68.046292][ T30] audit: type=1400 audit(1746253096.321:137): avc: denied { create } for pid=5899 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.061293][ T5125] Bluetooth: hci1: command tx timeout [ 68.072844][ T30] audit: type=1400 audit(1746253096.701:138): avc: denied { watch } for pid=5897 comm="syz.0.1" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.080656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.103122][ T5901] kernel profiling enabled (shift: 7) [ 68.129833][ T5814] veth1_macvtap: entered promiscuous mode [ 68.132711][ T5125] Bluetooth: hci0: command tx timeout [ 68.141536][ T5125] Bluetooth: hci2: command tx timeout [ 68.147059][ T5125] Bluetooth: hci3: command tx timeout [ 68.152745][ T5125] Bluetooth: hci4: command tx timeout [ 68.162960][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.235657][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.316495][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.327285][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.344923][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.357497][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.368131][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.378662][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.389130][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.398950][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.409368][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.420516][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.433659][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.441145][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.444276][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.453684][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.489099][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.499977][ T30] audit: type=1400 audit(1746253097.181:139): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.qY2fC6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.511262][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.540585][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.551198][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.568090][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.596375][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.606573][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.617592][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.628448][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.660861][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.677913][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686832][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.695995][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.770982][ T30] audit: type=1400 audit(1746253097.461:140): avc: denied { create } for pid=5905 comm="syz.0.8" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.846607][ T30] audit: type=1400 audit(1746253097.541:141): avc: denied { read } for pid=5909 comm="syz.3.4" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.925982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.934871][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.013409][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.053815][ T5910] binder: BINDER_SET_CONTEXT_MGR already set [ 69.060103][ T5910] binder: 5909:5910 ioctl 4018620d 200000000040 returned -16 [ 69.088661][ T5910] binder: 5909:5910 ioctl c0306201 200000000280 returned -11 [ 69.177021][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.206980][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293107][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.372094][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 69.582727][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.585309][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.592880][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.631181][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.639901][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.648675][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.690964][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.725399][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 70.093334][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 70.122926][ T24] usb 4-1: config 0 has no interface number 0 [ 70.132002][ T5862] usb 2-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 70.132250][ T5819] Bluetooth: hci1: command tx timeout [ 70.146771][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.159849][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 70.172394][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.181962][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.194619][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.212009][ T24] usb 4-1: Product: syz [ 70.213105][ T5819] Bluetooth: hci4: command tx timeout [ 70.222308][ T5125] Bluetooth: hci2: command tx timeout [ 70.227604][ T5862] usb 2-1: Product: syz [ 70.227963][ T5815] Bluetooth: hci0: command tx timeout [ 70.233097][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.251636][ T24] usb 4-1: Manufacturer: syz [ 70.356088][ T5862] usb 2-1: Manufacturer: syz [ 70.360719][ T5862] usb 2-1: SerialNumber: syz [ 70.372120][ T24] usb 4-1: SerialNumber: syz [ 70.380384][ T24] usb 4-1: config 0 descriptor?? [ 70.587064][ T54] bridge_slave_1: left allmulticast mode [ 70.600695][ T54] bridge_slave_1: left promiscuous mode [ 70.611073][ T5862] usb 2-1: 0:2 : does not exist [ 70.617557][ T5862] usb 2-1: unit 9 not found! [ 70.625665][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.652216][ T5862] usb 2-1: USB disconnect, device number 2 [ 70.661878][ T54] bridge_slave_0: left allmulticast mode [ 70.671417][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.685137][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.706631][ T54] bridge_slave_0: left promiscuous mode [ 70.715843][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.873643][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 70.886787][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.905049][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.916520][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.925916][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.937069][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.948001][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.976086][ T5824] usb 5-1: config 0 descriptor?? [ 71.016511][ T5824] hub 5-1:0.0: USB hub found [ 71.071457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.091637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.191439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.213590][ T5824] hub 5-1:0.0: 1 port detected [ 71.248787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.258882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 71.259704][ T5944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14'. [ 71.267565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.411260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 71.424693][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 71.433536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.447474][ T24] usb 4-1: Please update to version 0.2 or newer [ 71.491764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.570705][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.615239][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.673344][ T54] bond0 (unregistering): (slave bond1): Releasing backup interface [ 71.683686][ T54] bond0 (unregistering): Released all slaves [ 71.702844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.732050][ T5819] Bluetooth: hci3: command tx timeout [ 71.850386][ T5862] hub 5-1:0.0: activate --> -90 [ 71.871072][ T54] bond1 (unregistering): Released all slaves [ 72.362904][ T5950] vlan1: entered allmulticast mode [ 72.393094][ T24] usb 4-1: USB disconnect, device number 2 [ 72.414724][ T5950] veth0_vlan: entered allmulticast mode [ 72.436639][ T5824] usb 5-1: USB disconnect, device number 2 [ 72.673224][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 72.694237][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 72.694251][ T30] audit: type=1400 audit(1746253101.391:173): avc: denied { read write } for pid=5954 comm="syz.1.16" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.740488][ T30] audit: type=1400 audit(1746253101.391:174): avc: denied { open } for pid=5954 comm="syz.1.16" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.764767][ T5862] usb 5-1-port1: config error [ 72.778263][ T30] audit: type=1400 audit(1746253101.471:175): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.821079][ T5955] pim6reg: entered allmulticast mode [ 73.004088][ T30] audit: type=1326 audit(1746253101.691:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz.3.18" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c29b8e969 code=0x0 [ 73.106462][ T30] audit: type=1400 audit(1746253101.801:177): avc: denied { mounton } for pid=5959 comm="syz.3.18" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.131343][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.138484][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.167096][ T5919] bridge_slave_0: entered allmulticast mode [ 73.175921][ T30] audit: type=1400 audit(1746253101.821:178): avc: denied { create } for pid=5959 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.192777][ T5919] bridge_slave_0: entered promiscuous mode [ 73.197087][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 73.228527][ T30] audit: type=1400 audit(1746253101.921:179): avc: denied { write } for pid=5959 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.255771][ T54] hsr_slave_0: left promiscuous mode [ 73.262757][ T54] hsr_slave_1: left promiscuous mode [ 73.268607][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.280072][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.293247][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.298645][ T30] audit: type=1400 audit(1746253101.991:180): avc: denied { read } for pid=5973 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.310756][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.355684][ T30] audit: type=1400 audit(1746253102.021:181): avc: denied { open } for pid=5973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.414288][ T54] veth1_macvtap: left promiscuous mode [ 73.419945][ T54] veth0_macvtap: left promiscuous mode [ 73.425870][ T30] audit: type=1400 audit(1746253102.021:182): avc: denied { getattr } for pid=5973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.461455][ T54] veth1_vlan: left promiscuous mode [ 73.466854][ T54] veth0_vlan: left promiscuous mode [ 73.491738][ T5861] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.714086][ T5861] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 73.722460][ T5861] usb 5-1: config 0 has no interface number 0 [ 73.739457][ T5861] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.773828][ T5861] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 73.811616][ T5819] Bluetooth: hci3: command tx timeout [ 73.817257][ T5861] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 73.931312][ T5861] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.950875][ T5861] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.980556][ T5987] Zero length message leads to an empty skb [ 74.011805][ T5861] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 74.028505][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.040071][ T5861] usb 5-1: Product: syz [ 74.044628][ T5861] usb 5-1: Manufacturer: syz [ 74.049386][ T5861] usb 5-1: SerialNumber: syz [ 74.055061][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 74.075402][ T5861] usb 5-1: config 0 descriptor?? [ 74.081005][ T5969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.093497][ T5861] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 74.132715][ T5861] scsi host1: usb-storage 5-1:0.189 [ 74.246048][ T54] team0 (unregistering): Port device team_slave_1 removed [ 74.269968][ T54] team0 (unregistering): Port device team_slave_0 removed [ 74.303905][ T5861] usb 5-1: USB disconnect, device number 3 [ 74.480680][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.488693][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.495999][ T5919] bridge_slave_1: entered allmulticast mode [ 74.503720][ T5919] bridge_slave_1: entered promiscuous mode [ 74.567400][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.585801][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.630794][ T5919] team0: Port device team_slave_0 added [ 74.643847][ T5919] team0: Port device team_slave_1 added [ 74.739561][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.767359][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.803030][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.883251][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.890211][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.946150][ T6007] fuse: Bad value for 'fd' [ 74.979434][ T6007] program syz.4.24 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.008769][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.028218][ T5996] bridge_slave_0: left allmulticast mode [ 75.034214][ T5996] bridge_slave_0: left promiscuous mode [ 75.040903][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.057982][ T6007] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.081504][ T6012] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 75.088213][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.110466][ T5996] bridge_slave_1: left allmulticast mode [ 75.132498][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 75.139601][ T5996] bridge_slave_1: left promiscuous mode [ 75.146185][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.154324][ T6014] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 75.160935][ T6014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.170700][ T6014] vhci_hcd vhci_hcd.0: Device attached [ 75.177409][ T6021] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.188202][ T6012] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 75.194837][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.216660][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 75.233733][ T6012] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 75.240339][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.662990][ T5862] vhci_hcd: vhci_device speed not set [ 75.701188][ T5996] bond0: (slave bond_slave_0): Releasing backup interface [ 75.712841][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 75.719119][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.727664][ T5996] bond0: (slave bond_slave_1): Releasing backup interface [ 75.751896][ T5862] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 75.754220][ T6014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.770888][ T5996] team0: Port device team_slave_0 removed [ 75.816017][ T5996] team0: Port device team_slave_1 removed [ 75.830048][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.859131][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.911327][ T5819] Bluetooth: hci3: command tx timeout [ 75.933353][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.959106][ T6027] vhci_hcd: connection closed [ 75.960301][ T3545] vhci_hcd: stop threads [ 75.973880][ T3545] vhci_hcd: release socket [ 75.978539][ T3545] vhci_hcd: disconnect device [ 75.988503][ T6013] vhci_hcd: connection reset by peer [ 75.993971][ T6024] vhci_hcd: connection closed [ 75.995700][ T6019] vhci_hcd: connection closed [ 76.015231][ T3545] vhci_hcd: stop threads [ 76.015948][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.047056][ T3545] vhci_hcd: release socket [ 76.083039][ T3545] vhci_hcd: disconnect device [ 76.124821][ T3545] vhci_hcd: stop threads [ 76.129444][ T3545] vhci_hcd: release socket [ 76.282747][ T5861] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 76.313746][ T971] cfg80211: failed to load regulatory.db [ 76.323949][ T3545] vhci_hcd: disconnect device [ 76.330125][ T3545] vhci_hcd: stop threads [ 76.335069][ T3545] vhci_hcd: release socket [ 76.339745][ T3545] vhci_hcd: disconnect device [ 76.375752][ T6017] team0: Mode changed to "loadbalance" [ 76.483595][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.521643][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.530911][ T6038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 76.537520][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.575426][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 76.577915][ T5861] usb 5-1: string descriptor 0 read error: -22 [ 76.607848][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.609873][ T6041] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 76.623478][ T6041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.627417][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.641349][ T6041] vhci_hcd vhci_hcd.0: Device attached [ 76.658159][ T6038] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.705552][ T5919] hsr_slave_0: entered promiscuous mode [ 76.724795][ T6041] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 76.731415][ T6041] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.732203][ T5919] hsr_slave_1: entered promiscuous mode [ 76.759548][ T5861] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.826696][ T6041] vhci_hcd vhci_hcd.0: Device attached [ 77.095451][ T6038] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 77.102087][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.206177][ T24] vhci_hcd: vhci_device speed not set [ 77.231544][ T6041] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.252419][ T6041] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.281335][ T24] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 77.302387][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 77.358357][ T6050] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 77.364992][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.681424][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 77.823122][ T6056] vhci_hcd: connection closed [ 77.825717][ T6051] vhci_hcd: connection closed [ 77.830492][ T6046] vhci_hcd: connection closed [ 77.835467][ T54] vhci_hcd: stop threads [ 77.841265][ T6043] vhci_hcd: connection closed [ 77.844480][ T6039] vhci_hcd: connection reset by peer [ 77.973071][ T5125] Bluetooth: hci3: command tx timeout [ 78.264888][ T54] vhci_hcd: release socket [ 78.269820][ T54] vhci_hcd: disconnect device [ 78.276419][ T54] vhci_hcd: stop threads [ 78.280669][ T54] vhci_hcd: release socket [ 78.286615][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 78.286626][ T30] audit: type=1400 audit(1746253106.981:201): avc: denied { getattr } for pid=6064 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1751 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.290936][ T3507] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.338921][ T54] vhci_hcd: disconnect device [ 78.345952][ T54] vhci_hcd: stop threads [ 78.360394][ T54] vhci_hcd: release socket [ 78.370038][ T54] vhci_hcd: disconnect device [ 78.397181][ T54] vhci_hcd: stop threads [ 78.407270][ T54] vhci_hcd: release socket [ 78.419010][ T54] vhci_hcd: disconnect device [ 78.438339][ T54] vhci_hcd: stop threads [ 78.445249][ T30] audit: type=1400 audit(1746253107.141:202): avc: denied { read } for pid=6068 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1751 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.472109][ T54] vhci_hcd: release socket [ 78.481291][ T54] vhci_hcd: disconnect device [ 78.502495][ T30] audit: type=1400 audit(1746253107.161:203): avc: denied { open } for pid=6068 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1751 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.636855][ T30] audit: type=1400 audit(1746253107.331:204): avc: denied { create } for pid=6059 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.666205][ T30] audit: type=1400 audit(1746253107.331:205): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=1999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.693127][ T30] audit: type=1400 audit(1746253107.331:206): avc: denied { append } for pid=6059 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" dev="tmpfs" ino=1999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.694503][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.820601][ T30] audit: type=1400 audit(1746253107.511:207): avc: denied { unlink } for pid=6078 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=1999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.897048][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 78.934983][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.948909][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 78.983731][ T5863] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 79.003248][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.026079][ T5863] usb 1-1: Product: syz [ 79.030267][ T5863] usb 1-1: Manufacturer: syz [ 79.051264][ T5863] usb 1-1: SerialNumber: syz [ 79.070692][ T5863] usb 1-1: config 0 descriptor?? [ 79.394987][ T5904] usb 5-1: USB disconnect, device number 4 [ 79.762461][ T5919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.823443][ T5863] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 79.849822][ T5919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.873341][ T5919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.902425][ T5919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.937195][ T30] audit: type=1400 audit(1746253108.631:208): avc: denied { ioctl } for pid=6098 comm="syz.1.34" path="socket:[8169]" dev="sockfs" ino=8169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.977885][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.984687][ T5125] Bluetooth: hci5: command 0x1003 tx timeout [ 80.075106][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 80.076257][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.086979][ T30] audit: type=1400 audit(1746253108.761:209): avc: denied { create } for pid=6098 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.106392][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.170621][ T6102] vivid-003: disconnect [ 80.191251][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.198404][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.699798][ T5904] usb 1-1: USB disconnect, device number 2 [ 80.711805][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 80.720856][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 80.733360][ T5819] Bluetooth: hci1: hardware error 0x00 [ 80.851928][ T5862] vhci_hcd: vhci_device speed not set [ 81.065741][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.072892][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.111697][ T5863] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 82.167658][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.194986][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 83.168507][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 83.170164][ T24] vhci_hcd: vhci_device speed not set [ 83.191301][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.201058][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.348153][ T5863] usb 2-1: string descriptor 0 read error: -71 [ 83.354601][ T5863] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 83.367634][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.389242][ T5863] usb 2-1: config 0 descriptor?? [ 83.404522][ T5863] usb 2-1: can't set config #0, error -71 [ 83.426875][ T5863] usb 2-1: USB disconnect, device number 3 [ 83.433646][ T6129] fuse: Bad value for 'fd' [ 83.436337][ T6102] vivid-003: reconnect [ 83.445251][ T30] audit: type=1400 audit(1746253112.131:210): avc: denied { mounton } for pid=6128 comm="syz.3.39" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.524780][ T6129] program syz.3.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.599430][ T6129] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.614782][ T30] audit: type=1400 audit(1746253112.311:211): avc: denied { sys_module } for pid=5919 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.323962][ T30] audit: type=1400 audit(1746253112.361:212): avc: denied { create } for pid=6130 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.653559][ T30] audit: type=1400 audit(1746253112.361:213): avc: denied { ioctl } for pid=6130 comm="syz.4.38" path="socket:[9300]" dev="sockfs" ino=9300 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.692216][ T30] audit: type=1400 audit(1746253112.651:214): avc: denied { append } for pid=6135 comm="syz.0.40" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.523067][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.588570][ T6155] netlink: 552 bytes leftover after parsing attributes in process `syz.1.42'. [ 85.684357][ T5919] veth0_vlan: entered promiscuous mode [ 86.105881][ T6155] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 86.239403][ T6169] program syz.0.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.263741][ T6169] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.315457][ T5919] veth1_vlan: entered promiscuous mode [ 86.378609][ T5919] veth0_macvtap: entered promiscuous mode [ 86.397714][ T5919] veth1_macvtap: entered promiscuous mode [ 86.465670][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.525668][ T30] audit: type=1400 audit(1746253115.221:215): avc: denied { write } for pid=6179 comm="syz.1.46" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.551045][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.581362][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.594955][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.628453][ T30] audit: type=1400 audit(1746253115.251:216): avc: denied { open } for pid=6179 comm="syz.1.46" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.656873][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.669952][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.681562][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.708927][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.720950][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.736595][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.747429][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.759748][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.771157][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.833723][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.853315][ T30] audit: type=1400 audit(1746253115.541:217): avc: denied { read write } for pid=6179 comm="syz.1.46" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.449106][ T30] audit: type=1400 audit(1746253115.541:218): avc: denied { open } for pid=6179 comm="syz.1.46" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.472546][ T30] audit: type=1400 audit(1746253115.541:219): avc: denied { map } for pid=6179 comm="syz.1.46" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.677365][ T5919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.711745][ T5919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.733534][ T5919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.750126][ T5919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.283179][ T6212] netlink: 44 bytes leftover after parsing attributes in process `syz.4.50'. [ 89.289003][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 89.289014][ T30] audit: type=1400 audit(1746253117.981:221): avc: denied { create } for pid=6210 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.340988][ T30] audit: type=1400 audit(1746253118.021:222): avc: denied { bind } for pid=6210 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.366044][ T30] audit: type=1400 audit(1746253118.031:223): avc: denied { getopt } for pid=6210 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.510129][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.540070][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.659165][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.679917][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.692194][ T6223] binder: BINDER_SET_CONTEXT_MGR already set [ 89.698189][ T6223] binder: 6221:6223 ioctl 4018620d 2000000000c0 returned -16 [ 89.720917][ T30] audit: type=1400 audit(1746253118.411:224): avc: denied { mount } for pid=5919 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.792669][ T30] audit: type=1400 audit(1746253118.441:225): avc: denied { mount } for pid=5919 comm="syz-executor" name="/" dev="gadgetfs" ino=6882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.835259][ T30] audit: type=1400 audit(1746253118.441:226): avc: denied { create } for pid=6221 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.876969][ T5862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.537406][ T30] audit: type=1400 audit(1746253118.441:227): avc: denied { setopt } for pid=6221 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.691886][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 90.700934][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 90.793495][ T5862] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 90.828666][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.858120][ T5862] usb 5-1: Product: syz [ 90.887944][ T5862] usb 5-1: Manufacturer: syz [ 90.908144][ T5862] usb 5-1: SerialNumber: syz [ 90.929571][ T5862] usb 5-1: config 0 descriptor?? [ 90.940875][ T3545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.953930][ T5862] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 91.090381][ T5862] usb 5-1: Detected FT232R [ 91.298633][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.746810][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.773983][ T3545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.794814][ T5862] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.796641][ T30] audit: type=1400 audit(1746253120.491:228): avc: denied { ioctl } for pid=6217 comm="syz.4.52" path="socket:[9744]" dev="sockfs" ino=9744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.830748][ T5819] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 91.842103][ T5819] Bluetooth: hci2: Injecting HCI hardware error event [ 91.849812][ T5819] Bluetooth: hci2: hardware error 0x00 [ 91.972783][ T3545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.009830][ T30] audit: type=1400 audit(1746253120.701:229): avc: denied { create } for pid=6259 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.017915][ T5862] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.060884][ T6263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.63'. [ 92.101612][ T30] audit: type=1400 audit(1746253120.731:230): avc: denied { setopt } for pid=6259 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.130804][ T3545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.235746][ T5862] usb 5-1: USB disconnect, device number 5 [ 92.273171][ T5862] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.304945][ T5862] ftdi_sio 5-1:0.0: device disconnected [ 92.495809][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 92.517336][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 92.541169][ T3545] bridge_slave_1: left allmulticast mode [ 92.549334][ T3545] bridge_slave_1: left promiscuous mode [ 92.561432][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.572897][ T5824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.586588][ T3545] bridge_slave_0: left allmulticast mode [ 92.597001][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.601241][ T3545] bridge_slave_0: left promiscuous mode [ 92.613815][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.616726][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.628890][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.638542][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.648951][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.742048][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.752572][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.764484][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.780164][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 92.803208][ T5824] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.815837][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.825276][ T5824] usb 2-1: Product: syz [ 92.830135][ T5824] usb 2-1: Manufacturer: syz [ 92.837026][ T5824] usb 2-1: SerialNumber: syz [ 92.864298][ T5824] usb 2-1: config 0 descriptor?? [ 92.931507][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 92.940887][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.968535][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.984794][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.994291][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.008507][ T24] usb 1-1: config 0 descriptor?? [ 93.017656][ T24] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 93.105674][ T5824] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 93.163904][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.180490][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.190358][ T3545] bond0 (unregistering): Released all slaves [ 93.204765][ T6278] veth1_to_team: entered promiscuous mode [ 94.159782][ T5819] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.430608][ T5894] usb 2-1: USB disconnect, device number 4 [ 94.691384][ T5819] Bluetooth: hci3: command tx timeout [ 95.610871][ T5894] usb 1-1: USB disconnect, device number 3 [ 95.795445][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 95.803691][ T6339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.76'. [ 96.099323][ T3545] hsr_slave_0: left promiscuous mode [ 96.136986][ T3545] hsr_slave_1: left promiscuous mode [ 96.151787][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.161300][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.171861][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.188377][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.232677][ T3545] veth1_macvtap: left promiscuous mode [ 96.331334][ T3545] veth0_macvtap: left promiscuous mode [ 96.344596][ T3545] veth1_vlan: left promiscuous mode [ 96.357111][ T3545] veth0_vlan: left promiscuous mode [ 96.800130][ T5819] Bluetooth: hci3: command tx timeout [ 97.120670][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.005125][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 98.028590][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 98.042161][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 98.042174][ T30] audit: type=1400 audit(1746253126.731:233): avc: denied { rename } for pid=5167 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.070681][ T30] audit: type=1400 audit(1746253126.731:234): avc: denied { unlink } for pid=5167 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.074230][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.093176][ T30] audit: type=1400 audit(1746253126.741:235): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.256003][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 98.269266][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.279520][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.292507][ T5894] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.301631][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.314188][ T5894] usb 1-1: config 0 descriptor?? [ 98.322759][ T5894] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 98.433741][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.443450][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.456473][ T6283] bridge_slave_0: entered allmulticast mode [ 98.463905][ T6283] bridge_slave_0: entered promiscuous mode [ 98.475590][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.483869][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.491091][ T6283] bridge_slave_1: entered allmulticast mode [ 98.498532][ T6283] bridge_slave_1: entered promiscuous mode [ 98.524657][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.540333][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.580458][ T6283] team0: Port device team_slave_0 added [ 98.589974][ T6283] team0: Port device team_slave_1 added [ 98.634533][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.641895][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.668176][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.684031][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.690975][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.694631][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.718685][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.848741][ T6283] hsr_slave_0: entered promiscuous mode [ 98.854899][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.861308][ T6283] hsr_slave_1: entered promiscuous mode [ 98.877869][ T5815] Bluetooth: hci3: command tx timeout [ 98.987861][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 99.157003][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.166748][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 99.179898][ T5894] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 99.195968][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.757296][ T5894] usb 5-1: Product: syz [ 99.762161][ T5894] usb 5-1: Manufacturer: syz [ 99.767220][ T5894] usb 5-1: SerialNumber: syz [ 99.948784][ T5894] usb 5-1: config 0 descriptor?? [ 100.058055][ T6403] netlink: 44 bytes leftover after parsing attributes in process `syz.1.92'. [ 100.067774][ T6405] binder: BINDER_SET_CONTEXT_MGR already set [ 100.077585][ T6405] binder: 6404:6405 ioctl 4018620d 2000000000c0 returned -16 [ 100.185881][ T5894] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 101.383517][ T5815] Bluetooth: hci3: command tx timeout [ 101.853204][ T48] usb 1-1: USB disconnect, device number 4 [ 101.887926][ T5894] usb 5-1: USB disconnect, device number 6 [ 102.678273][ T6283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.172534][ T6283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.206808][ T6283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.346985][ T6283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.188634][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 104.799501][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.823784][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.836762][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.843920][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.864686][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.871833][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.150400][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.288097][ T6283] veth0_vlan: entered promiscuous mode [ 105.385902][ T6283] veth1_vlan: entered promiscuous mode [ 105.533460][ T6283] veth0_macvtap: entered promiscuous mode [ 105.592561][ T6283] veth1_macvtap: entered promiscuous mode [ 105.711460][ T6483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34064 sclass=netlink_route_socket pid=6483 comm=syz.3.105 [ 106.105745][ T3065] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.160796][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.182221][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.202193][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.233450][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.250535][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.269239][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.297041][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.329221][ T3065] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.341423][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 106.351389][ T30] audit: type=1400 audit(1746253135.041:236): avc: denied { nlmsg_write } for pid=6482 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.401963][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.427777][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.444176][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.459900][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.481800][ T6283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.502537][ T6283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.528880][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.640259][ T3065] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.695048][ T6283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.721534][ T6283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.730212][ T6283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.782246][ T6283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.957306][ T3065] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.943563][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.951848][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.959371][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.967804][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.976106][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.004413][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.022558][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.036575][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.052677][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.335689][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.615111][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 108.632681][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.653442][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 108.793128][ T5865] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 108.834601][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.880294][ T5865] usb 2-1: Product: syz [ 108.917938][ T3065] bridge_slave_1: left allmulticast mode [ 108.929950][ T5865] usb 2-1: Manufacturer: syz [ 108.957576][ T5865] usb 2-1: SerialNumber: syz [ 108.968701][ T3065] bridge_slave_1: left promiscuous mode [ 108.981724][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.003729][ T5865] usb 2-1: config 0 descriptor?? [ 109.010575][ T3065] bridge_slave_0: left allmulticast mode [ 109.164868][ T3065] bridge_slave_0: left promiscuous mode [ 109.171223][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.588058][ T5865] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 110.091728][ T5125] Bluetooth: hci2: command tx timeout [ 110.511783][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.524377][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.535265][ T3065] bond0 (unregistering): Released all slaves [ 110.627274][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 111.096150][ T3065] hsr_slave_0: left promiscuous mode [ 111.125727][ T3065] hsr_slave_1: left promiscuous mode [ 111.139112][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.177234][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.240071][ T5824] usb 2-1: USB disconnect, device number 5 [ 111.249483][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.282945][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.340188][ T3065] veth1_macvtap: left promiscuous mode [ 111.356253][ T3065] veth0_macvtap: left promiscuous mode [ 111.361878][ T3065] veth1_vlan: left promiscuous mode [ 111.381461][ T3065] veth0_vlan: left promiscuous mode [ 111.456704][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 111.487215][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 111.727162][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.769977][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.781381][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.792505][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.805596][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.989731][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.999784][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.008957][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.019623][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.029575][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.141288][ T5815] Bluetooth: hci2: command tx timeout [ 112.296048][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 112.321142][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 112.508910][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.518764][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.526280][ T6518] bridge_slave_0: entered allmulticast mode [ 112.533775][ T6518] bridge_slave_0: entered promiscuous mode [ 112.541704][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.548788][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.556180][ T6518] bridge_slave_1: entered allmulticast mode [ 112.563312][ T6518] bridge_slave_1: entered promiscuous mode [ 112.712911][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.725490][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.968233][ T6518] team0: Port device team_slave_0 added [ 112.980249][ T6518] team0: Port device team_slave_1 added [ 113.152019][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.159226][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.192120][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.278354][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.286632][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.312845][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.581159][ T6518] hsr_slave_0: entered promiscuous mode [ 113.587850][ T6518] hsr_slave_1: entered promiscuous mode [ 113.593890][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.604088][ T6518] Cannot create hsr debugfs directory [ 113.894742][ T3065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.971684][ T5815] Bluetooth: hci0: command tx timeout [ 114.071392][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.132103][ T5815] Bluetooth: hci3: command tx timeout [ 114.211266][ T5815] Bluetooth: hci2: command tx timeout [ 114.241658][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 114.271659][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.284403][ T5894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.296902][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.312395][ T5894] usb 2-1: config 0 descriptor?? [ 114.319962][ T5894] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 114.407491][ T3065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.437467][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 114.446500][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 114.514238][ T3065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.644257][ T3065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.739005][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.750680][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.758598][ T6584] bridge_slave_0: entered allmulticast mode [ 114.769328][ T6584] bridge_slave_0: entered promiscuous mode [ 114.795336][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.816747][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.828802][ T6580] bridge_slave_0: entered allmulticast mode [ 114.839085][ T6580] bridge_slave_0: entered promiscuous mode [ 114.850575][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.872177][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.890311][ T6584] bridge_slave_1: entered allmulticast mode [ 114.909252][ T6584] bridge_slave_1: entered promiscuous mode [ 114.944155][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.959231][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.968453][ T6580] bridge_slave_1: entered allmulticast mode [ 114.979556][ T6580] bridge_slave_1: entered promiscuous mode [ 115.107562][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.131577][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.192090][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.230770][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.239576][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.250738][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.265637][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.274487][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.283984][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.304626][ T6584] team0: Port device team_slave_0 added [ 115.357552][ T6580] team0: Port device team_slave_0 added [ 115.365406][ T6584] team0: Port device team_slave_1 added [ 115.409751][ T6580] team0: Port device team_slave_1 added [ 115.473781][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.480739][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.508551][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.521842][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.528828][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.555103][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.574386][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.581385][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.607587][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.629118][ T3065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.663448][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.670908][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.697047][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.745062][ T3065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.793070][ T6580] hsr_slave_0: entered promiscuous mode [ 115.799465][ T6580] hsr_slave_1: entered promiscuous mode [ 115.805645][ T6580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.813431][ T6580] Cannot create hsr debugfs directory [ 115.827161][ T6584] hsr_slave_0: entered promiscuous mode [ 115.833412][ T6584] hsr_slave_1: entered promiscuous mode [ 115.839277][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.846950][ T6584] Cannot create hsr debugfs directory [ 115.866503][ T3065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.965776][ T3065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.024033][ T6518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.055589][ T5815] Bluetooth: hci0: command tx timeout [ 116.066263][ T6518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.098843][ T6518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.130382][ T6518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.215098][ T5815] Bluetooth: hci3: command tx timeout [ 116.291431][ T5815] Bluetooth: hci2: command tx timeout [ 116.336853][ T3065] bridge_slave_1: left allmulticast mode [ 116.343604][ T3065] bridge_slave_1: left promiscuous mode [ 116.349246][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.358989][ T3065] bridge_slave_0: left allmulticast mode [ 116.366860][ T3065] bridge_slave_0: left promiscuous mode [ 116.375720][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.708103][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.718342][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.727782][ T3065] bond0 (unregistering): Released all slaves [ 116.781898][ T3065] bond0 (unregistering): Released all slaves [ 116.836562][ T5865] usb 2-1: USB disconnect, device number 6 [ 116.879454][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 117.118958][ T6667] 9pnet_fd: Insufficient options for proto=fd [ 117.128661][ T6667] openvswitch: netlink: Key type 30 is not supported [ 117.384129][ T5815] Bluetooth: hci1: command tx timeout [ 117.475466][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.493701][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.500908][ T6644] bridge_slave_0: entered allmulticast mode [ 117.518004][ T6644] bridge_slave_0: entered promiscuous mode [ 117.595350][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.606228][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.614309][ T6644] bridge_slave_1: entered allmulticast mode [ 117.622788][ T6644] bridge_slave_1: entered promiscuous mode [ 117.773482][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.820979][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.927340][ T6644] team0: Port device team_slave_0 added [ 117.956685][ T6644] team0: Port device team_slave_1 added [ 118.016438][ T3065] hsr_slave_0: left promiscuous mode [ 118.025956][ T3065] hsr_slave_1: left promiscuous mode [ 118.031955][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.039351][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.047743][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.056011][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.071056][ T3065] hsr_slave_0: left promiscuous mode [ 118.077124][ T3065] hsr_slave_1: left promiscuous mode [ 118.101382][ T5865] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.109994][ T3065] veth1_macvtap: left promiscuous mode [ 118.116318][ T3065] veth0_macvtap: left promiscuous mode [ 118.126001][ T3065] veth1_vlan: left promiscuous mode [ 118.131287][ T5815] Bluetooth: hci0: command tx timeout [ 118.131787][ T3065] veth0_vlan: left promiscuous mode [ 118.148668][ T3065] veth1_macvtap: left promiscuous mode [ 118.154382][ T3065] veth0_macvtap: left promiscuous mode [ 118.159990][ T3065] veth1_vlan: left promiscuous mode [ 118.169398][ T3065] veth0_vlan: left promiscuous mode [ 118.266355][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 118.289211][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.298993][ T5815] Bluetooth: hci3: command tx timeout [ 118.314478][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 118.338650][ T5865] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 118.348647][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.360254][ T5865] usb 2-1: Product: syz [ 118.366004][ T5865] usb 2-1: Manufacturer: syz [ 118.370614][ T5865] usb 2-1: SerialNumber: syz [ 118.389472][ T5865] usb 2-1: config 0 descriptor?? [ 118.613884][ T5865] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 118.702476][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 118.730750][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 119.458764][ T5815] Bluetooth: hci1: command tx timeout [ 119.809246][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.818319][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.845907][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.868571][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.876997][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.904134][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.955664][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.974806][ T6644] hsr_slave_0: entered promiscuous mode [ 119.980917][ T6644] hsr_slave_1: entered promiscuous mode [ 120.036424][ T6584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.101025][ T6584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.127110][ T6584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.148889][ T6584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.166045][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.214112][ T5815] Bluetooth: hci0: command tx timeout [ 120.247019][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.254167][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.301835][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.308954][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.372108][ T5815] Bluetooth: hci3: command tx timeout [ 120.490998][ T6518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.547137][ T6580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.589555][ T6644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.607881][ T6580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.625062][ T6580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.673897][ T6644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.692847][ T6580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.718195][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.747136][ T6644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.819660][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.833985][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.865704][ T6644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.913505][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.920656][ T6523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.974205][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.981350][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.036181][ T3065] bridge_slave_1: left allmulticast mode [ 121.052041][ T3065] bridge_slave_1: left promiscuous mode [ 121.057751][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.088019][ T3065] bridge_slave_0: left allmulticast mode [ 121.101315][ T3065] bridge_slave_0: left promiscuous mode [ 121.107001][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.330010][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.342346][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.352214][ T3065] bond0 (unregistering): Released all slaves [ 121.426902][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.492204][ T5815] Bluetooth: hci1: command tx timeout [ 121.559683][ T6644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.584859][ T6644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.610394][ T6644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.638312][ T3065] hsr_slave_0: left promiscuous mode [ 121.645447][ T3065] hsr_slave_1: left promiscuous mode [ 121.651751][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.659223][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.668462][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.676012][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.693293][ T3065] veth1_macvtap: left promiscuous mode [ 121.698796][ T3065] veth0_macvtap: left promiscuous mode [ 121.704444][ T3065] veth1_vlan: left promiscuous mode [ 121.709704][ T3065] veth0_vlan: left promiscuous mode [ 121.910105][ T5808] usb 2-1: USB disconnect, device number 7 [ 122.019415][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 122.047497][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 122.237186][ T6644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.249810][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.289151][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.300569][ T6518] veth0_vlan: entered promiscuous mode [ 122.327992][ T6518] veth1_vlan: entered promiscuous mode [ 122.344323][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.351443][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.379811][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.398720][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.405836][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.455955][ T6518] veth0_macvtap: entered promiscuous mode [ 122.465730][ T6518] veth1_macvtap: entered promiscuous mode [ 122.513736][ T6580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.525873][ T6580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.572734][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.588481][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.603213][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.631125][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.645316][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.657907][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.669682][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.684481][ T6584] veth0_vlan: entered promiscuous mode [ 122.706315][ T6518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.715709][ T6518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.724802][ T6518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.733757][ T6518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.747495][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.769117][ T6584] veth1_vlan: entered promiscuous mode [ 122.779901][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.787001][ T6523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.805834][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.812951][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.850831][ T6584] veth0_macvtap: entered promiscuous mode [ 122.876959][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.934716][ T6584] veth1_macvtap: entered promiscuous mode [ 123.053638][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.103060][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.270160][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.302489][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.316415][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.326962][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.338510][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.368606][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 123.377939][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 123.400128][ T6580] veth0_vlan: entered promiscuous mode [ 123.406915][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.420335][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.430292][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.441994][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.453298][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.472385][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.480220][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.484768][ T6580] veth1_vlan: entered promiscuous mode [ 123.509248][ T6584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.524506][ T6584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.538786][ T6584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.553308][ T6584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.572706][ T5815] Bluetooth: hci1: command tx timeout [ 123.674765][ T6580] veth0_macvtap: entered promiscuous mode [ 123.735142][ T6580] veth1_macvtap: entered promiscuous mode [ 123.748693][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.784921][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.815811][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.826765][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.837179][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.848010][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.858738][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.870184][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.883849][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.900964][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.912852][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.914027][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.928729][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.961929][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.983418][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.001908][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.013927][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.025399][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.044899][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.094157][ T6580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.109673][ T6580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.118527][ T6580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.127406][ T6580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.200347][ T3065] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.339373][ T3065] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.396738][ T6644] veth0_vlan: entered promiscuous mode [ 124.489715][ T3065] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.520248][ T6644] veth1_vlan: entered promiscuous mode [ 124.595040][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.610871][ T6644] veth0_macvtap: entered promiscuous mode [ 124.638385][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.656708][ T3065] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.706411][ T6644] veth1_macvtap: entered promiscuous mode [ 124.809820][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.818437][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.826283][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.837781][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.846983][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.874340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.884915][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.897330][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.902438][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.914681][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.925260][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.935342][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.946947][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.957191][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.967959][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.980224][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.997081][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.012730][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.023037][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.033678][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.043685][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.055249][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.065452][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.076634][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.092798][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.106223][ T6644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.115387][ T6644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.124756][ T6644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.133778][ T6644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.466702][ T3065] bridge_slave_1: left allmulticast mode [ 125.485990][ T3065] bridge_slave_1: left promiscuous mode [ 125.521577][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.592259][ T3065] bridge_slave_0: left allmulticast mode [ 125.598494][ T3065] bridge_slave_0: left promiscuous mode [ 125.611429][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.624380][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.632731][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.641345][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.649071][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.656986][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.962420][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.970241][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.978808][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.990084][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.997885][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.047711][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.058571][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.068538][ T3065] bond0 (unregistering): Released all slaves [ 126.091130][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.122299][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.321024][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.335713][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.615104][ T3065] hsr_slave_0: left promiscuous mode [ 126.624654][ T3065] hsr_slave_1: left promiscuous mode [ 126.630451][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.645932][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.662259][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.677821][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.700020][ T3065] veth1_macvtap: left promiscuous mode [ 126.706948][ T3065] veth0_macvtap: left promiscuous mode [ 126.723003][ T3065] veth1_vlan: left promiscuous mode [ 126.741402][ T3065] veth0_vlan: left promiscuous mode [ 126.934745][ T5815] Bluetooth: hci2: command tx timeout [ 127.152843][ T3065] team0 (unregistering): Port device team_slave_1 removed [ 127.176436][ T3065] team0 (unregistering): Port device team_slave_0 removed [ 127.742861][ T5815] Bluetooth: hci0: command tx timeout [ 127.793275][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 128.055195][ T5815] Bluetooth: hci3: command tx timeout [ 128.090245][ T6788] chnl_net:caif_netlink_parms(): no params data found [ 128.156218][ T6782] chnl_net:caif_netlink_parms(): no params data found [ 128.217070][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.245665][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.253741][ T6778] bridge_slave_0: entered allmulticast mode [ 128.263106][ T6778] bridge_slave_0: entered promiscuous mode [ 128.285325][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.301301][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.308440][ T6778] bridge_slave_1: entered allmulticast mode [ 128.325461][ T6778] bridge_slave_1: entered promiscuous mode [ 128.560840][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.574636][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.585168][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.590104][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.593324][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.609584][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.622275][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.791116][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.804246][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.815056][ T6788] bridge_slave_0: entered allmulticast mode [ 128.824265][ T6788] bridge_slave_0: entered promiscuous mode [ 128.838218][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.846970][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.860946][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.874273][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.882297][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.896037][ T6778] team0: Port device team_slave_0 added [ 128.904278][ T6778] team0: Port device team_slave_1 added [ 128.913337][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.920442][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.932188][ T6788] bridge_slave_1: entered allmulticast mode [ 128.939335][ T6788] bridge_slave_1: entered promiscuous mode [ 129.004531][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.011608][ T5815] Bluetooth: hci2: command tx timeout [ 129.017850][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.025443][ T6782] bridge_slave_0: entered allmulticast mode [ 129.033653][ T6782] bridge_slave_0: entered promiscuous mode [ 129.041446][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.048511][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.055654][ T6782] bridge_slave_1: entered allmulticast mode [ 129.062866][ T6782] bridge_slave_1: entered promiscuous mode [ 129.077612][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.086115][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.112576][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.127034][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.134013][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.160015][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.179230][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.192286][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.218448][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.265544][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.309216][ T6778] hsr_slave_0: entered promiscuous mode [ 129.315393][ T6778] hsr_slave_1: entered promiscuous mode [ 129.321962][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.329517][ T6778] Cannot create hsr debugfs directory [ 129.339433][ T6788] team0: Port device team_slave_0 added [ 129.349109][ T6788] team0: Port device team_slave_1 added [ 129.388681][ T3065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.436971][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.444244][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.471505][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.495898][ T6782] team0: Port device team_slave_0 added [ 129.536766][ T3065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.556094][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.563238][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.596880][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.631050][ T6782] team0: Port device team_slave_1 added [ 129.696928][ T3065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.738910][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.749402][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.780145][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.797317][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.804610][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.830827][ T5815] Bluetooth: hci0: command tx timeout [ 129.837335][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.918382][ T3065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.935169][ T6523] ================================================================== [ 129.943284][ T6523] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 129.950731][ T6523] Read of size 8 at addr ffffffff9af98530 by task kworker/u8:10/6523 [ 129.958773][ T6523] [ 129.961081][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: kworker/u8:10 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 129.961098][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 129.961107][ T6523] Workqueue: events_unbound linkwatch_event [ 129.961126][ T6523] Call Trace: [ 129.961131][ T6523] [ 129.961136][ T6523] dump_stack_lvl+0x116/0x1f0 [ 129.961154][ T6523] print_report+0xc3/0x670 [ 129.961167][ T6523] ? __virt_addr_valid+0x5e/0x590 [ 129.961186][ T6523] ? __phys_addr+0xc6/0x150 [ 129.961206][ T6523] ? fib6_ifdown+0x7f5/0x8f0 [ 129.961217][ T6523] kasan_report+0xe0/0x110 [ 129.961230][ T6523] ? fib6_ifdown+0x7f5/0x8f0 [ 129.961244][ T6523] fib6_ifdown+0x7f5/0x8f0 [ 129.961257][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 129.961269][ T6523] fib6_clean_node+0x2a4/0x5b0 [ 129.961283][ T6523] ? __pfx_fib6_clean_node+0x10/0x10 [ 129.961298][ T6523] fib6_walk_continue+0x44f/0x8d0 [ 129.961319][ T6523] fib6_walk+0x182/0x370 [ 129.961337][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 129.961348][ T6523] fib6_clean_tree+0xd4/0x110 [ 129.961367][ T6523] ? __pfx_fib6_clean_tree+0x10/0x10 [ 129.961387][ T6523] ? __pfx_fib6_clean_node+0x10/0x10 [ 129.961398][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 129.961412][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 129.961424][ T6523] __fib6_clean_all+0x107/0x2d0 [ 129.961445][ T6523] rt6_sync_down_dev+0x139/0x160 [ 129.961462][ T6523] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 129.961479][ T6523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.961501][ T6523] addrconf_notify+0x12ef/0x19e0 [ 129.961516][ T6523] ? ip6mr_device_event+0x1bc/0x230 [ 129.961533][ T6523] notifier_call_chain+0xb9/0x410 [ 129.961551][ T6523] ? __pfx_addrconf_notify+0x10/0x10 [ 129.961566][ T6523] ? ref_tracker_free+0x360/0x830 [ 129.961584][ T6523] call_netdevice_notifiers_info+0xbe/0x140 [ 129.961601][ T6523] netif_state_change+0x165/0x3b0 [ 129.961616][ T6523] ? __pfx_netif_state_change+0x10/0x10 [ 129.961633][ T6523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.961654][ T6523] linkwatch_do_dev+0x12b/0x160 [ 129.961671][ T6523] __linkwatch_run_queue+0x2aa/0x8a0 [ 129.961688][ T6523] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 129.961707][ T6523] linkwatch_event+0x8f/0xc0 [ 129.961723][ T6523] ? __pfx_linkwatch_event+0x10/0x10 [ 129.961739][ T6523] ? rcu_is_watching+0x12/0xc0 [ 129.961754][ T6523] process_one_work+0x9cc/0x1b70 [ 129.961770][ T6523] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 129.961788][ T6523] ? __pfx_process_one_work+0x10/0x10 [ 129.961803][ T6523] ? assign_work+0x1a0/0x250 [ 129.961816][ T6523] worker_thread+0x6c8/0xf10 [ 129.961831][ T6523] ? __kthread_parkme+0x19e/0x250 [ 129.961850][ T6523] ? __pfx_worker_thread+0x10/0x10 [ 129.961863][ T6523] kthread+0x3c2/0x780 [ 129.961874][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961885][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961895][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961906][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961917][ T6523] ? rcu_is_watching+0x12/0xc0 [ 129.961931][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961943][ T6523] ret_from_fork+0x45/0x80 [ 129.961955][ T6523] ? __pfx_kthread+0x10/0x10 [ 129.961966][ T6523] ret_from_fork_asm+0x1a/0x30 [ 129.961996][ T6523] [ 129.962000][ T6523] [ 130.271802][ T6523] The buggy address belongs to the variable: [ 130.277754][ T6523] __key.0+0x30/0x40 [ 130.281648][ T6523] [ 130.283958][ T6523] The buggy address belongs to the physical page: [ 130.290353][ T6523] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af98 [ 130.299113][ T6523] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 130.307014][ T6523] raw: 00fff00000002000 ffffea00006be608 ffffea00006be608 0000000000000000 [ 130.315587][ T6523] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 130.324151][ T6523] page dumped because: kasan: bad access detected [ 130.330540][ T6523] page_owner info is not present (never set?) [ 130.336580][ T6523] [ 130.338883][ T6523] Memory state around the buggy address: [ 130.344665][ T6523] ffffffff9af98400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 130.352705][ T6523] ffffffff9af98480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 130.360758][ T6523] >ffffffff9af98500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 130.368798][ T6523] ^ [ 130.374402][ T6523] ffffffff9af98580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 130.382530][ T6523] ffffffff9af98600: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 130.390567][ T6523] ================================================================== [ 130.398663][ T6523] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.405859][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: kworker/u8:10 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 130.418090][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.428132][ T6523] Workqueue: events_unbound linkwatch_event [ 130.434016][ T6523] Call Trace: [ 130.437293][ T6523] [ 130.440212][ T6523] dump_stack_lvl+0x3d/0x1f0 [ 130.444788][ T6523] panic+0x71c/0x800 [ 130.448680][ T6523] ? __pfx_panic+0x10/0x10 [ 130.453095][ T6523] ? mark_held_locks+0x49/0x80 [ 130.457861][ T6523] ? fib6_ifdown+0x7f5/0x8f0 [ 130.462431][ T6523] ? check_panic_on_warn+0x1f/0xb0 [ 130.467535][ T6523] ? fib6_ifdown+0x7f5/0x8f0 [ 130.472121][ T6523] check_panic_on_warn+0xab/0xb0 [ 130.477059][ T6523] end_report+0x107/0x170 [ 130.481384][ T6523] kasan_report+0xee/0x110 [ 130.485791][ T6523] ? fib6_ifdown+0x7f5/0x8f0 [ 130.490393][ T6523] fib6_ifdown+0x7f5/0x8f0 [ 130.494801][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 130.499718][ T6523] fib6_clean_node+0x2a4/0x5b0 [ 130.504483][ T6523] ? __pfx_fib6_clean_node+0x10/0x10 [ 130.509764][ T6523] fib6_walk_continue+0x44f/0x8d0 [ 130.514951][ T6523] fib6_walk+0x182/0x370 [ 130.519179][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 130.524098][ T6523] fib6_clean_tree+0xd4/0x110 [ 130.528759][ T6523] ? __pfx_fib6_clean_tree+0x10/0x10 [ 130.534030][ T6523] ? __pfx_fib6_clean_node+0x10/0x10 [ 130.539300][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 130.544219][ T6523] ? __pfx_fib6_ifdown+0x10/0x10 [ 130.549138][ T6523] __fib6_clean_all+0x107/0x2d0 [ 130.553984][ T6523] rt6_sync_down_dev+0x139/0x160 [ 130.558907][ T6523] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 130.564439][ T6523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.570319][ T6523] addrconf_notify+0x12ef/0x19e0 [ 130.575245][ T6523] ? ip6mr_device_event+0x1bc/0x230 [ 130.580427][ T6523] notifier_call_chain+0xb9/0x410 [ 130.585435][ T6523] ? __pfx_addrconf_notify+0x10/0x10 [ 130.590709][ T6523] ? ref_tracker_free+0x360/0x830 [ 130.595721][ T6523] call_netdevice_notifiers_info+0xbe/0x140 [ 130.601614][ T6523] netif_state_change+0x165/0x3b0 [ 130.606647][ T6523] ? __pfx_netif_state_change+0x10/0x10 [ 130.612190][ T6523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.618171][ T6523] linkwatch_do_dev+0x12b/0x160 [ 130.623010][ T6523] __linkwatch_run_queue+0x2aa/0x8a0 [ 130.628285][ T6523] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 130.634079][ T6523] linkwatch_event+0x8f/0xc0 [ 130.638655][ T6523] ? __pfx_linkwatch_event+0x10/0x10 [ 130.643931][ T6523] ? rcu_is_watching+0x12/0xc0 [ 130.648688][ T6523] process_one_work+0x9cc/0x1b70 [ 130.653610][ T6523] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 130.660008][ T6523] ? __pfx_process_one_work+0x10/0x10 [ 130.665362][ T6523] ? assign_work+0x1a0/0x250 [ 130.669930][ T6523] worker_thread+0x6c8/0xf10 [ 130.674505][ T6523] ? __kthread_parkme+0x19e/0x250 [ 130.679513][ T6523] ? __pfx_worker_thread+0x10/0x10 [ 130.684780][ T6523] kthread+0x3c2/0x780 [ 130.688829][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.693415][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.697986][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.702566][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.707141][ T6523] ? rcu_is_watching+0x12/0xc0 [ 130.711894][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.716461][ T6523] ret_from_fork+0x45/0x80 [ 130.720860][ T6523] ? __pfx_kthread+0x10/0x10 [ 130.725431][ T6523] ret_from_fork_asm+0x1a/0x30 [ 130.730185][ T6523] [ 130.733377][ T6523] Kernel Offset: disabled [ 130.737677][ T6523] Rebooting in 86400 seconds..