last executing test programs: 1m12.32527038s ago: executing program 0 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x50d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m12.152004315s ago: executing program 0 (id=1284): bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000ac6f00000001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) 1m11.398146748s ago: executing program 0 (id=1287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x2044040) 1m11.081238007s ago: executing program 0 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 43.282656652s ago: executing program 0 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.742328696s ago: executing program 2 (id=1504): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 10.608949455s ago: executing program 2 (id=1505): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff64) timer_create(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, @thr={&(0x7f0000000180)="073ed70336ace908ee994cf74734b321d11f056ce3532537849da36be7248a1518", &(0x7f0000000300)="4feb2370f76bc02f3d0c3f278ec83251a32d9b2f1e3a84d0710901304663a14333bbe3fc3c0a91ff5139f485920704"}}, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="380000002000010000000000000000000200000000000000000000001400"], 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd600a843500580600fe80000000000000fc05ad63335ccacfaa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780000080a00000000000000000402030300001000f2daa80000000000000008000013129b9ac097452aa9ae0753a433f7b1bef7"], 0x0) 10.491565365s ago: executing program 0 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.171067822s ago: executing program 1 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) open(0x0, 0x143142, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, 0x0) open(0x0, 0x60142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x8001008, r1, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x148}}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x4}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 7.149266192s ago: executing program 3 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000001c0)=0x1) 7.072984258s ago: executing program 2 (id=1515): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x16, 0x0, 0x1f, 0xfffffffe}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) 5.40865401s ago: executing program 3 (id=1518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r0, @ANYRES64, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="3684469d22090f98b299decc3462fec090ac9ffb67192d72fde4c73c806d40d645a27ca9dca5dfb78158696de2470df6da64c5ba34dc1964dd6211b5eac3d38b2f708b28b233857101d05ffd67e7b817e8a77cbe6694c858546347ee693a08577772179e1960ffbc050942d4bd0ab3dc2794ed8c2db486d95a6b0e0ff464c55088e58d4a3703b52cc6ee412a6225db6ba03a66b575cd986198303436ac0ccf6664b305e5499f9cb5a5fd695df4ad9fc7079b94fef407e72c743a1589f9af7467511574fcb7d2bc0d3acdf29b1ed232bef246be7bb5c1601851dae413ac05712916cfeb260f21a9e78cf5cd1dfa6b3847533c112aece3bcdf979c221a320472f3d5a30914b935ac9878d28add41b900af472cbc159df0b1fee862fba48e123a21c02db249c9be22eaefb2c3671ab54f1b5e2bc672d768e33d31891e7492ff20d5a9347445971065a1f67e02b8214c037fea01edacc7555eedecb2281f64d468e701561bb88838c697689aa7b030f2c10cf3297064f5c181e2a2c937ae3b67cb007e43e16686991c23872aa8cfdd9511c445daf4b87409797ce3db62df68605277da3a6f3a4df0a07e34b3f13c78f2cd56bd6964cd56622a9f6d3682d3fe9f77039596405cf09e95956e8460dedda94d19ab04cd9bc1fb636744a85b7fce19e334b73428fab9ccb29f8b2602cd3e5acb0cc71d34a7fafafbf2c76939e313b5d0e5985c526854715fac45947e809fd353d3f4bebe3513d2e94d104354d121dc4739f3699a05aa74017906f8728eb146f40f15603ac9d041eb9ace04a9e7e6690b0d2aec749ac5935bb86ed3a0bfc22d1df3e1123b1d51836a6ab03d80795886f43a04309f10b6d6ed1087cb7f5d826295f893a05182d1b5aac37b2fd6271d71c807ae6fd24c09d578023b0b3719f6495ea66544fe15439ffdfa8698df9292b1204134d103a7ebfa7a7a4d43d9cac620773b1f57f8d6ce1648f4e17ca15b77814944c9d5077d2d551e30a9b00a3fddb27c9e9883236e117778f0017c945443a3f9d5ff384e049f77282a5685d3bda5a985836e1ee99ec8512e4bd0c05caed90ec130bfcc037e4797b0a0ef31c72e91b27dd8812c5b466f3b9ed4e75a1d782f133ba5e968bb7608d0df241a02de73a3549a3a7fb2e450c70b8c5354ea0c1f93236f0ade00874aeb7a2877909c22a4521fb05f4a3b16607e8272f35491eed2c33420f396eb26f453fd1ce33d3b1ac23258363b67c0463c0167d5d573826f0d6fbc84552546ea1a41f4a09a763f97f1dd6c8d273275e1a9b4ed13aa8c5a80c918171e08dbd9899526a941f478895001df96300a42227dcafc49e7672c75633d9f2f0878913a0f800e94adb08e882cd24d398e3d6d3939fd3eaf38c0f9e15f46a7a9b3fbe179e9a9082e9bff1aaa4c71ea54673fb0f3f1c20d18f30c06b9653c1df72160bddd58378e68cf63fec2fdd5a1a7657f99249a5ae071361ed67204c6ce08b6136ec2894ce505d10c584739fb217d2de6a9b6037c726b3824cd7581ad8d8788526ea8ac9d1d79ab187956b84a795e30362813a88244e66cf0e1c97f3559230548bc9ca46bd1de2fb788d3118da6170814b255203ac73d4a2c26920c3c9e7a9229a501c6f0b003e1dccee610215363cc99b66010bb5c2d8e6e9e1f267e5ae97ab813a60fa63d10a5827d2c1942f7360b001a16f7da199014f231f902a888d3d0343be13333a1e95a6e33acd3e5a034289c19e3bde136b85829e065b04a4415403cac3f8542d3b7b273cc31fb568f064f193fdf8f2d4806282198fa3cdf220a969c10b39adcbd8892414fdf832c5d953240b7b5b4274dd65cb0dfa01d7557ebeb2e54a1a1c7affea2e0cee1b2e2784ba64f9692309ac35df5d389ec9c7c9e1b532c1ff8bba3f39a968eaaa1332756120af670584674ef4bc47cd9d60591593b8ef0032b92ef19f4875c21a9f810e8d7fb867518e313a76fb21611a64b41a1e2bdf27d6dcc280aa661642e0406b09038b412dc8a528dfc3d5635c6da05a444c26eab9a3eabfb3585a51e0ac0c3789d0b48c4f42a068e29af03fa146cffdd76172aa1eb400b4ad83574522d4bbb3401be0f37f5811d349b77bfcef1a2b942a2248a4ee203fdfed5d652ce6877568eb7d13d72b28de93a2fe7613ecd4cfb146eae0e2bf3c975b5d689faa1aae8fc1c755315d8be8d7e9626a5f0bfb6b31c225b650dc47bc736c2bcfb87eb390c726bafe52858688e9ee076e8bf9cc22e27598b2c4688c9803b38c95f5d107dd55e86d1055a031f10bbc9bbe7a69c470fdd501e7872c7d4c98fd5dcbeafc33ed6aba739beba28149e86726150135ece266fc7189fea6a48ff65c819787c0a5e4ba16dbfcec866a980e93e9442cb2edab0b19337188a23ba88286f07a755cf8c7e257f0275f997bf42c0f0e2a27587e88af61d9ca25405609895d86c58668bcd26faa6f57f2cdcf70b7bd28723619ae4398759af94e8b539bc72ce377c538eb402c30da66fbe41aff2be5a2c6445f1ee8ff6b177318a5019c134264bd56adf6ae78ff24a79ae2841eaa48e46ea7b2b9aad9184f0468850baf1c11f808013236b8998bc56840126a738a86c7a14246851ea56b680ef21d598eed17297285b8bcdbd84b75fdb45866859ad833ef180f50bbab4819167a26bb6baec78524e28f67bca3c3ae551b92a7d88f1ddac396f8e635c4c029324ed0fc9b56536700331e13f8008e712bfef80fc799a29260e4c05f7fac73f8912fae85e6424ddd92ad075cf0dd708a5410ffb7b01fd17bbcc232ea692107fba9165fdc35132dae569fe9730e19adff49829ca1d43ac3c481e6e783118689b88b272a949c3348579e888909feae9189263a6c4408b4a6e0b8db21969baa608d0151a587f5aeef3dfd18350b1b10793bcc0f57e7a1f4f5dd54ecf7e4b6ac40609751b99694c347cc3ba3ca87755e19343007e7ed2d8265c973f4f05c625cc3be1e1d2e329a5377e43cde38ddfa7780d88be62d3628229005af86728d8c8d1f3666d06384fdd0e840d39922bdd07d62ad5a64060f83551131d430edfa998ed979ff31534f1b34aadd83325a99bd6c7fbe8bb7d569d6896dc1e309ff31067da94145947b80038b16388831fcadb56819945e4151af8192edfc580c71885ac5df6801809e3c40ad6dad66a9062055239493e74ba799b49c3932bf8c7cdbd9fa8b37ede0272c9820cc5b5c429cdc4d386276a51191b2a3302c8c844176241507d20311c86614d68fa5216605d3f988f39a97dcaacda9b404ad09655586cdaa7cea43611c556160ff7bbb53cda9ca44610ba85365112a5e41fbc9f255521e2ffae91272cb5b73b44a65dd9eace0307893272aa9f2281d6e8ff63e288bed11cd559ef3f120e7b9597a874d5c4d8d21067ba1c6c15964822f36c556e89652cd86f8bc7705ef7fa52ba55d194316779694255441ba019bc6d9a20c5c2fd9b7693f18c48eb099115446edb2d0579bb6cb0951f3a6f59dfb011aebbf05409782a848fd81201e74fccd5e591802dee7643e2c1e643483943876bb6e7821445f9f3bf5155cc6e2c84832f017f34965cd9064ec687bb736d5fffeb63ab32d401ca21c78c120f39643977804e11dbf399bae66f19592362401702624a80b61e3a8f03d1a90ef33ae2c76f2bcd1b2f3994ed884d7586c33c60dbe39ac24c40da24b50cb50ce1986cf7df9ad6d96a98a428b6f40ccc1840f4cef0f54385b3b1ea8c0437bead910387c5f8a1dbc5dcdf3566d87083246915b03491899be5f57ec3a542233cd46dc49187aeff945770300fab32dd82ba03cec7eedcc9d37817ec11e3362d9f367e3725ee844362a4186392a68b7b1e0bff15064dddf3976d6f35266da29435828885a776922f8d2032c929e73456315bb9adb94148480126f8afc33bce20dccf5986375e6e353ab663c0b639ee94c9864d3d88eb8221ecc5de9d64364fea6e285a9b14ba2660379dc633b6f3cba577492558f34f7f3291ae2ed65cbbb13f93cd0fda3c6c23dc0c39245620ae9d94550af24d68f55c63b9ef6146270162ab28f62805a23ed2a465a688010403f179e03b344be985130aced9a232dcbc8af7458aed495d7b2f3e5e3dd7c91248cb9dc6f7560ecd349f93e2269572358dd2b21852c8a026758aa79893a1aabb9e41e76a4c8ef3fae29a54e3b413105565cd14dc314b2afa7da6170e79d5f1d7e0e73eb6d2a828d6476f5b2b6108fbeb5178a75177fb3f2815c9738b40e145f9fe3fb2fcf09ef49b3dbeb523f975a1528f140dc5bd222a0bb13c9a0256f88ce02ab5386332137526511adbcf5b7b26be52b0818656cf38471900c690c7f3e31720a3007f8e62caf5f46a380ef38d1b3d2e1d5035505b2640431b5417232f5cc5d2fe94017a1158147ff38f92f4bb399c1aa25ce6aad66179ec788b643823f7a20108b071afb19b73023ebd0811d95c03ce25b905f24b6db023fd9358dfb596cc96a2f9109fae5089757d9189dff3f603a14b9c46d5eb91f195a4ca61fd55cf06221620289f1604000159256ae5d37bcf71aaf6f44be4fbebda7d702e4d4cb8380b59dae1f47240f9eb73e99cc12bc07ddc17a5eb48d530edcfe84a2007413e61c4c2fbccbb8dac73b99e645980bfa5ea3c227b8769b4307b4a3d530c9329854d846c96c8c88cea18e87b0f121a430a701758546ee1693963ab947c80e7be0ecc49cdcf8d866cd586240d9834fffc1950bab5d88307140a408723f85941bcb70272844faceefd1568888b1d7b10d2f39893f3da645a0048b682b42d46f6b572728aaf6be333e75e4cfb0e655142d6882ef2ec76d9cc4bc6569a62755ace458f4fcf749c022b4b3fbc2f558e4186b611517dd636c72079eabcad528acaae3514a4a036a1a6392253874df85db9c2437dd069cd3f1650a4b843d2a6beccf3e7d77fc1ea8a322897ce80fee44b49d0802974c2039f64ce3ecfbc282ad126748b3e084879de9c4257a2648c62cb71b67976cb3477da4e945bb422fe6137f7fa2b7a432b238cc7165daf13159e200720a37fea1a9948c714f38767beff8989e80b1aea57550e2716093f80d207c0de89e3aa6044f11f4789c595eb4f9898d81644f6188f6cb1c822fbaf48ff3c46f2cee30f4617804a0ccf1909c6a4228e73739db31e4dcc560c77cf2799d15e8388c11c73c4230c35c2b26c2f784cc29e2c4426eda9d1f36b043b9640bac1d27168e8ea82be6d20a9ec5e528b82d8846db171e37be44f12d7b0d8788d6aaf3de57f86e7d22e46fd1d4c7d9a9b4000d95c95ddbae67fd81a3fefc8ec18ba8290aed0a54feaa6a47af07d7e9548f17e913d2afe664dc017bc133e121ec7453abab3b11a6a8fdf54e5c0b387d448370857c3c8c6868099e2549f7964995bb67b24cc1cca76faebee2217d8ab1148899086cc6e53d9dc8b44f47a3d3955ec72daa79c4bb4a888f602fc4157fc47f70e691d28c81fc7446f2240bddad435394e89b3f11997bb2e323b0bf41b7d5277f9855249da1b543093b2ad481398b931f141b335a8b67e0eca76a23a3876b133d32e4ede6b47d0e9bd92f29abc2e88f25385e5f69d295e77a75ea976721846d7c7deb92cb3259fedf443bccc98ea73ba130ef5ff7e84647b0fd72a7631b0202f101edd83dc34f8595cddb2e05134dce6974e652b9f6b66e8d96b4ff30b3a8e43b21df7ea7d16359fba1a417d1cc9bd5278460cd3c3e010b7cb964d8334b7fcda7497c585"], 0x48) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x18}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40286608, &(0x7f0000000180)={@desc={0x39d, 0x2000000, @desc3}}) 5.177315528s ago: executing program 1 (id=1519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}}], 0x1, 0x0) 5.176982423s ago: executing program 3 (id=1520): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) write$dsp(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x40000017) 5.176804452s ago: executing program 2 (id=1521): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b21, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 5.149890917s ago: executing program 4 (id=1522): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xc628, 0x200, 0x6, 0x11085, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x3, @void, @value, @value}, 0x50) 5.005682165s ago: executing program 4 (id=1523): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 4.161137454s ago: executing program 1 (id=1524): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) 4.160925087s ago: executing program 4 (id=1525): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000300)) 3.884175517s ago: executing program 3 (id=1526): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 3.883780568s ago: executing program 4 (id=1527): r0 = syz_io_uring_setup(0x4bdb, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000000000), &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[r1], 0x1) r2 = dup2(r0, r1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 3.625028089s ago: executing program 4 (id=1528): syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4a, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 3.333231511s ago: executing program 4 (id=1529): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) 3.122221717s ago: executing program 1 (id=1530): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) write$dsp(r3, &(0x7f0000000300), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x40000017) 1.821229331s ago: executing program 1 (id=1531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) 1.644339749s ago: executing program 2 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r0, @ANYRES64, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x18}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40286608, &(0x7f0000000180)={@desc={0x39d, 0x2000000, @desc3}}) 1.530140515s ago: executing program 1 (id=1533): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) read$FUSE(r1, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) umount2(0x0, 0xa) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000001040)='smaps_rollup\x00') close_range(r5, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x4f, 0x0) syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x8]}, @output_terminal={0x9}, @selector_unit={0x5, 0x24, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 1.461106092s ago: executing program 3 (id=1534): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x1100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 119.184756ms ago: executing program 2 (id=1535): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x0, 0x4}, 0xc) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r8, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=1536): socket$can_j1939(0x1d, 0x2, 0x7) openat$hwrng(0xffffffffffffff9c, 0x0, 0x102, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x1, {0x1, 0xff}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): dv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.710806][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.720715][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.750789][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.778794][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.820782][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.888884][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.867066][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.878808][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.888898][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.899397][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.909267][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.921126][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.933035][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.943828][T10749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.954489][T10749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.963412][T10749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.973467][T10749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.816625][T10757] veth0_macvtap: entered promiscuous mode [ 818.874820][T11123] netlink: 'syz.3.855': attribute type 39 has an invalid length. [ 818.883142][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 818.896643][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.904115][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.954829][T10757] veth1_macvtap: entered promiscuous mode [ 819.041461][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.049331][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.070192][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.094084][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.105699][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.117909][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.128081][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.138841][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.149037][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.159867][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.172819][T10757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.206355][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.219245][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.229213][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.241871][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.251821][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.262373][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.272540][T10757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.283380][T10757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.295847][T10757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.643248][T10757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.652800][T10757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.662643][T10757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.671909][T10757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.755184][ T5688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.480663][ T5688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.014356][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 822.744908][ T6260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.780847][ T6260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.102872][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.115631][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.569915][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 826.580111][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 826.589490][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 826.600043][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 826.618216][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 826.625598][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.058590][ T5227] Bluetooth: hci4: command tx timeout [ 829.517478][T11196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.418655][ T1283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.301418][ T5227] Bluetooth: hci4: command tx timeout [ 831.614810][T11172] chnl_net:caif_netlink_parms(): no params data found [ 832.620370][ T1283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.630865][ T5227] Bluetooth: hci4: command tx timeout [ 833.814531][ T1283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.860413][T11172] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.873677][T11172] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.897907][T11172] bridge_slave_0: entered allmulticast mode [ 833.921798][T11172] bridge_slave_0: entered promiscuous mode [ 833.934952][T11172] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.988701][T11172] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.996366][T11172] bridge_slave_1: entered allmulticast mode [ 834.004283][T11172] bridge_slave_1: entered promiscuous mode [ 834.039882][ T1283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.132544][T11172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.174481][T11172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.412156][T11172] team0: Port device team_slave_0 added [ 835.278653][T11172] team0: Port device team_slave_1 added [ 835.461581][T11172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.583383][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.884696][ T5227] Bluetooth: hci4: command tx timeout [ 836.588341][T11172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.161955][T11172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.168950][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.206664][T11172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.219815][T11253] netlink: 'syz.1.881': attribute type 39 has an invalid length. [ 837.227945][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 837.413837][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.421181][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.509409][ T1283] bridge_slave_1: left allmulticast mode [ 838.515585][ T1283] bridge_slave_1: left promiscuous mode [ 838.532448][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.705601][ T1283] bridge_slave_0: left allmulticast mode [ 838.717144][ T1283] bridge_slave_0: left promiscuous mode [ 838.725884][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.881240][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.969174][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.007729][ T1283] bond0 (unregistering): Released all slaves [ 840.109813][T11172] hsr_slave_0: entered promiscuous mode [ 840.121606][T11172] hsr_slave_1: entered promiscuous mode [ 840.128748][T11172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.137778][T11172] Cannot create hsr debugfs directory [ 842.847838][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 843.020840][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 843.029379][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 843.037910][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 843.046013][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 843.071487][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.879432][ T5227] Bluetooth: hci0: command tx timeout [ 846.448385][ T1283] hsr_slave_0: left promiscuous mode [ 846.459849][ T1283] hsr_slave_1: left promiscuous mode [ 846.478961][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.488694][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.507555][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.515492][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.570324][ T1283] veth1_macvtap: left promiscuous mode [ 846.578190][ T1283] veth0_macvtap: left promiscuous mode [ 846.584689][ T1283] veth1_vlan: left promiscuous mode [ 846.590243][ T1283] veth0_vlan: left promiscuous mode [ 847.275077][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 847.368456][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 847.991652][ T5227] Bluetooth: hci0: command tx timeout [ 848.770048][T11306] chnl_net:caif_netlink_parms(): no params data found [ 850.053323][ T5227] Bluetooth: hci0: command tx timeout [ 852.110697][ T5227] Bluetooth: hci0: command tx timeout [ 852.226642][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.262788][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.271587][T11306] bridge_slave_0: entered allmulticast mode [ 852.281847][T11306] bridge_slave_0: entered promiscuous mode [ 852.296060][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.305566][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.317236][T11306] bridge_slave_1: entered allmulticast mode [ 852.343107][T11306] bridge_slave_1: entered promiscuous mode [ 853.052710][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.064816][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.108528][T11306] team0: Port device team_slave_0 added [ 853.223297][T11306] team0: Port device team_slave_1 added [ 854.348931][T11172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 854.379097][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.503535][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.390665][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.834556][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.865328][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.205925][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.231193][T11172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 856.363745][T11172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 856.831661][T11172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 857.852012][T11306] hsr_slave_0: entered promiscuous mode [ 858.220027][T11306] hsr_slave_1: entered promiscuous mode [ 859.345540][ T1283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.569315][ T1283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.243797][ T1283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.847935][ T1283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.771894][T11172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.798990][T11172] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.867891][T11172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 861.898649][T11172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 861.960900][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.968072][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.977128][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.984343][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.071439][ T1283] bridge_slave_1: left allmulticast mode [ 866.080720][ T1283] bridge_slave_1: left promiscuous mode [ 866.118932][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.211315][ T1283] bridge_slave_0: left allmulticast mode [ 866.217098][ T1283] bridge_slave_0: left promiscuous mode [ 866.248530][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.669035][T11529] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 866.940080][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.957510][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.978426][ T1283] bond0 (unregistering): Released all slaves [ 867.022845][T11523] netlink: 'syz.0.911': attribute type 39 has an invalid length. [ 867.035651][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 867.046405][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.053722][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.476047][T11172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.193928][T11306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.213391][T11306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 869.823684][T11306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.986024][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.001126][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.025773][T11306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.558478][T11172] veth0_vlan: entered promiscuous mode [ 871.692875][T11172] veth1_vlan: entered promiscuous mode [ 871.803549][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.945858][T11172] veth0_macvtap: entered promiscuous mode [ 871.988373][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.008300][T11172] veth1_macvtap: entered promiscuous mode [ 872.343486][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.350586][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.405845][ T1283] hsr_slave_0: left promiscuous mode [ 872.412472][ T1283] hsr_slave_1: left promiscuous mode [ 872.520955][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.542608][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.682295][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.689702][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.921425][ T1283] veth1_macvtap: left promiscuous mode [ 872.961000][ T1283] veth0_macvtap: left promiscuous mode [ 872.966840][ T1283] veth1_vlan: left promiscuous mode [ 873.657935][ T1283] veth0_vlan: left promiscuous mode [ 875.200555][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 875.279004][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 876.921533][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.955158][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.972407][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.000122][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.020714][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.031572][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.047087][T11172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.297215][ T2459] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.304468][ T2459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.540199][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.024359][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.079914][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.104780][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.137754][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.158632][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.285487][T11172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.329974][T11172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.071661][T11172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.080413][T11172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.137277][T11172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.105062][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.150927][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.091815][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.121766][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.261950][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.490295][T11306] veth0_vlan: entered promiscuous mode [ 884.405275][T11306] veth1_vlan: entered promiscuous mode [ 884.449756][T11670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.578827][T11306] veth0_macvtap: entered promiscuous mode [ 884.608904][T11680] netlink: 'syz.4.938': attribute type 39 has an invalid length. [ 884.637158][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 884.899234][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.906548][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.933634][T11306] veth1_macvtap: entered promiscuous mode [ 884.955626][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.987995][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.024198][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.055534][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.075856][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.222409][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.232524][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.243443][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.254539][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.295501][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.314979][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.324980][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.336141][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.348531][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.359155][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.369256][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.379753][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.391213][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.402104][T11306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.410952][T11306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.419742][T11306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.428606][T11306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.621162][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.629115][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.636966][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.399905][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.192101][T11706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 889.844628][T11716] netlink: 'syz.0.946': attribute type 39 has an invalid length. [ 889.948472][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 890.327610][T11722] netlink: 'syz.0.948': attribute type 39 has an invalid length. [ 890.349679][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 890.509260][T11723] netlink: 'syz.2.947': attribute type 39 has an invalid length. [ 890.517296][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 890.550467][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.557940][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.728308][T11737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.912042][T11744] netlink: 'syz.0.953': attribute type 39 has an invalid length. [ 892.022051][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 901.652408][T11813] netlink: 'syz.0.968': attribute type 39 has an invalid length. [ 901.660433][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 903.969217][ T5228] Bluetooth: hci1: command 0x0406 tx timeout [ 903.979364][ T8876] Bluetooth: hci2: command 0x0406 tx timeout [ 907.369763][T11840] netlink: 'syz.4.973': attribute type 39 has an invalid length. [ 907.377605][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 913.302592][T11859] netlink: 'syz.2.974': attribute type 39 has an invalid length. [ 913.313999][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 913.454452][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 913.472068][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 913.479989][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 913.720591][T11871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.721205][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 913.790189][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 913.812313][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 913.988635][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.333565][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.190070][T11883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.233677][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.032106][ T5227] Bluetooth: hci5: command tx timeout [ 916.266935][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.059358][T11863] chnl_net:caif_netlink_parms(): no params data found [ 918.112853][ T5227] Bluetooth: hci5: command tx timeout [ 918.374046][ T62] bridge_slave_1: left allmulticast mode [ 918.379734][ T62] bridge_slave_1: left promiscuous mode [ 918.459455][T11917] FAULT_INJECTION: forcing a failure. [ 918.459455][T11917] name failslab, interval 1, probability 0, space 0, times 1 [ 918.480898][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.529343][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.2.991 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 918.540076][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 918.550148][T11917] Call Trace: [ 918.553442][T11917] [ 918.556384][T11917] dump_stack_lvl+0x16c/0x1f0 [ 918.561117][T11917] should_fail_ex+0x497/0x5b0 [ 918.565822][T11917] ? fs_reclaim_acquire+0xae/0x160 [ 918.570960][T11917] should_failslab+0xc2/0x120 [ 918.575663][T11917] __kmalloc_noprof+0xcb/0x400 [ 918.580451][T11917] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 918.586111][T11917] tomoyo_realpath_from_path+0xb9/0x720 [ 918.591689][T11917] ? tomoyo_path_number_perm+0x232/0x590 [ 918.597361][T11917] tomoyo_path_number_perm+0x245/0x590 [ 918.602852][T11917] ? tomoyo_path_number_perm+0x232/0x590 [ 918.608523][T11917] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 918.614576][T11917] ? trace_lock_acquire+0x14a/0x1d0 [ 918.619813][T11917] ? lock_acquire+0x2f/0xb0 [ 918.624341][T11917] ? __fget_files+0x40/0x3f0 [ 918.628964][T11917] ? __fget_files+0x244/0x3f0 [ 918.633679][T11917] security_file_ioctl+0x9b/0x240 [ 918.638731][T11917] __x64_sys_ioctl+0xbb/0x220 [ 918.643429][T11917] do_syscall_64+0xcd/0x250 [ 918.647927][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.653810][T11917] RIP: 0033:0x7fc562d7dff9 [ 918.658221][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.677815][T11917] RSP: 002b:00007fc563c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.686216][T11917] RAX: ffffffffffffffda RBX: 00007fc562f35f80 RCX: 00007fc562d7dff9 [ 918.694175][T11917] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 918.702133][T11917] RBP: 00007fc563c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 918.710090][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.718048][T11917] R13: 0000000000000000 R14: 00007fc562f35f80 R15: 00007fff8c654178 [ 918.726019][T11917] [ 918.860942][T11917] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.921343][ T62] bridge_slave_0: left allmulticast mode [ 918.967382][ T62] bridge_slave_0: left promiscuous mode [ 918.974549][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.166947][ T29] audit: type=1400 audit(1727934109.418:280): avc: denied { create } for pid=11921 comm="syz.4.993" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 919.246080][ T29] audit: type=1400 audit(1727934109.448:281): avc: denied { link } for pid=11921 comm="syz.4.993" name="file1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 919.768747][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.782303][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.821893][ T62] bond0 (unregistering): Released all slaves [ 920.181384][ T29] audit: type=1400 audit(1727934110.418:282): avc: denied { create } for pid=11935 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 920.271425][ T5227] Bluetooth: hci5: command tx timeout [ 923.204230][ T5227] Bluetooth: hci5: command tx timeout [ 923.598874][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.606236][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.639854][T11863] bridge_slave_0: entered allmulticast mode [ 923.664981][T11863] bridge_slave_0: entered promiscuous mode [ 923.902682][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.610322][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.639956][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.672812][T11863] bridge_slave_1: entered allmulticast mode [ 924.694080][T11863] bridge_slave_1: entered promiscuous mode [ 925.171995][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.227616][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.237325][T10459] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 925.389623][T11863] team0: Port device team_slave_0 added [ 925.411936][T10459] usb 5-1: Using ep0 maxpacket: 16 [ 925.421784][T11863] team0: Port device team_slave_1 added [ 925.435299][T10459] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 925.438518][T11983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.474990][T10459] usb 5-1: config 0 has no interface number 0 [ 925.494172][T11985] capability: warning: `syz.2.1004' uses deprecated v2 capabilities in a way that may be insecure [ 925.516293][T10459] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 925.535953][T10459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.566697][T10459] usb 5-1: Product: syz [ 925.577332][T10459] usb 5-1: Manufacturer: syz [ 925.613533][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.620501][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.651658][T10459] usb 5-1: SerialNumber: syz [ 925.692176][T10459] usb 5-1: config 0 descriptor?? [ 925.720164][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.811536][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.839246][T11996] FAULT_INJECTION: forcing a failure. [ 925.839246][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 925.861565][T11996] CPU: 0 UID: 0 PID: 11996 Comm: syz.2.1006 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 925.870651][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.872360][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 925.872378][T11996] Call Trace: [ 925.872388][T11996] [ 925.872399][T11996] dump_stack_lvl+0x16c/0x1f0 [ 925.903172][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.908371][T11996] should_fail_ex+0x497/0x5b0 [ 925.934487][T11996] ? fs_reclaim_acquire+0xae/0x160 [ 925.939638][T11996] should_failslab+0xc2/0x120 [ 925.944357][T11996] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 925.949754][T11996] ? create_new_namespaces+0x30/0xad0 [ 925.955146][T11996] create_new_namespaces+0x30/0xad0 [ 925.960385][T11996] __do_sys_setns+0x22e/0x18b0 [ 925.965174][T11996] ? fput+0x30/0x390 [ 925.969084][T11996] ? __pfx___do_sys_setns+0x10/0x10 [ 925.974313][T11996] ? ksys_write+0x1ad/0x260 [ 925.978888][T11996] do_syscall_64+0xcd/0x250 [ 925.983435][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.989358][T11996] RIP: 0033:0x7fc562d7dff9 [ 925.993800][T11996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.013419][T11996] RSP: 002b:00007fc563c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 926.021839][T11996] RAX: ffffffffffffffda RBX: 00007fc562f35f80 RCX: 00007fc562d7dff9 [ 926.029813][T11996] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000003 [ 926.037808][T11996] RBP: 00007fc563c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 926.045804][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.053826][T11996] R13: 0000000000000000 R14: 00007fc562f35f80 R15: 00007fff8c654178 [ 926.061839][T11996] [ 927.023702][T10459] usb 5-1: USB disconnect, device number 2 [ 927.248878][T11863] hsr_slave_0: entered promiscuous mode [ 927.265328][T11863] hsr_slave_1: entered promiscuous mode [ 927.292834][T11863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.315376][T11863] Cannot create hsr debugfs directory [ 927.385351][ T5266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 927.838250][ T5266] usb 3-1: device descriptor read/64, error -71 [ 928.132307][ T5266] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 929.091413][ T5266] usb 3-1: device descriptor read/64, error -71 [ 929.698246][ T5266] usb usb3-port1: attempt power cycle [ 929.775950][T12031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.815828][ T29] audit: type=1400 audit(1727934120.068:283): avc: denied { create } for pid=12035 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 930.700763][ T5266] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 930.718362][ T29] audit: type=1400 audit(1727934120.198:284): avc: denied { setopt } for pid=12035 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 930.740712][ T29] audit: type=1400 audit(1727934120.198:285): avc: denied { write } for pid=12035 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 930.814410][ T5266] usb 3-1: device descriptor read/8, error -71 [ 930.944012][ T29] audit: type=1400 audit(1727934121.198:286): avc: denied { read write } for pid=12041 comm="syz.0.1015" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 930.970387][ T29] audit: type=1400 audit(1727934121.218:287): avc: denied { open } for pid=12041 comm="syz.0.1015" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 932.174885][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.181296][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.132575][ T62] hsr_slave_0: left promiscuous mode [ 933.141651][ T29] audit: type=1400 audit(1727934123.398:288): avc: denied { ioctl } for pid=12063 comm="syz.0.1019" path="socket:[50259]" dev="sockfs" ino=50259 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 933.278410][ T62] hsr_slave_1: left promiscuous mode [ 933.556666][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.570935][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.623411][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.650248][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.713984][ T62] veth1_macvtap: left promiscuous mode [ 933.720254][T12050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.730541][ T62] veth0_macvtap: left promiscuous mode [ 933.754436][ T62] veth1_vlan: left promiscuous mode [ 933.760002][ T62] veth0_vlan: left promiscuous mode [ 934.375974][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.404845][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.495139][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.527910][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.630725][ T5266] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 934.743967][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.753827][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 934.810757][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 934.836191][ T5266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 934.875608][ T5266] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 934.890520][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 934.953533][ T5266] usb 2-1: Product: syz [ 934.974468][ T5266] usb 2-1: Manufacturer: syz [ 934.979516][ T5266] usb 2-1: SerialNumber: syz [ 934.990079][ T5266] usb 2-1: config 0 descriptor?? [ 935.024435][T12079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 935.179389][ T62] team0 (unregistering): Port device team_slave_1 removed [ 935.287221][ T62] team0 (unregistering): Port device team_slave_0 removed [ 935.410379][ T5266] usb 2-1: USB disconnect, device number 2 [ 936.066831][T10459] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 936.250296][T10459] usb 3-1: Using ep0 maxpacket: 8 [ 936.270514][T10459] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.300843][T12065] warning: `syz.0.1019' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 936.318814][T10459] usb 3-1: language id specifier not provided by device, defaulting to English [ 936.479841][T10459] usb 3-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.40 [ 936.521677][T10459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.849471][T10459] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 938.151562][ T29] audit: type=1400 audit(1727934127.688:289): avc: denied { read } for pid=12099 comm="syz.0.1029" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 938.187472][T11863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 938.441836][ T29] audit: type=1400 audit(1727934127.688:290): avc: denied { open } for pid=12099 comm="syz.0.1029" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 938.901276][ T29] audit: type=1400 audit(1727934129.148:291): avc: denied { listen } for pid=12113 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 939.342850][T10459] usb 3-1: USB disconnect, device number 6 [ 939.444272][ T29] audit: type=1400 audit(1727934129.188:292): avc: denied { accept } for pid=12113 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 939.464560][ T29] audit: type=1400 audit(1727934129.308:293): avc: denied { shutdown } for pid=12113 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 939.484869][ T29] audit: type=1400 audit(1727934129.328:294): avc: denied { accept } for pid=12113 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 939.638495][T11863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 939.743364][ T29] audit: type=1400 audit(1727934129.968:295): avc: denied { create } for pid=12125 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 939.784704][ T29] audit: type=1400 audit(1727934129.978:296): avc: denied { write } for pid=12125 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 939.820713][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 939.902115][T11863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 940.128247][T11863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 940.318485][T12149] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 941.071700][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.088187][T11863] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.133130][T11863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 941.144324][T11863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.257833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.265044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.312724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.319909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.499143][ T29] audit: type=1326 audit(1727934131.748:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1e877dff9 code=0x7fc00000 [ 941.552213][T12177] xt_CONNSECMARK: invalid mode: 0 [ 942.073192][ T29] audit: type=1326 audit(1727934132.268:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1e877dff9 code=0x7fc00000 [ 942.527919][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.565833][T12204] tty tty21: ldisc open failed (-12), clearing slot 20 [ 943.748229][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 943.748916][ T29] audit: type=1400 audit(1727934133.878:301): avc: denied { write } for pid=12196 comm="syz.1.1049" path="socket:[50596]" dev="sockfs" ino=50596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 943.881535][ T29] audit: type=1400 audit(1727934134.098:302): avc: denied { append } for pid=12196 comm="syz.1.1049" name="001" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 944.001809][ T29] audit: type=1400 audit(1727934134.258:303): avc: denied { read write } for pid=12213 comm="syz.0.1051" name="uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 944.037084][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.058553][T12215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 944.070426][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.095132][ T29] audit: type=1400 audit(1727934134.258:304): avc: denied { open } for pid=12213 comm="syz.0.1051" path="/dev/uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 944.108521][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.165504][T11863] veth0_vlan: entered promiscuous mode [ 944.180467][T11863] veth1_vlan: entered promiscuous mode [ 944.220779][ T29] audit: type=1400 audit(1727934134.258:305): avc: denied { read write } for pid=12213 comm="syz.0.1051" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.281573][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 944.282646][ T29] audit: type=1400 audit(1727934134.258:306): avc: denied { open } for pid=12213 comm="syz.0.1051" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.313061][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.331258][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.338760][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.340390][ T29] audit: type=1400 audit(1727934134.258:307): avc: denied { ioctl } for pid=12213 comm="syz.0.1051" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 944.347827][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.379381][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.387628][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.395609][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.403518][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.411074][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.418515][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.426436][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.434455][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.441967][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.449405][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.456931][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.464494][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.471962][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.479397][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.486948][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.494420][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.501990][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.509432][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.517121][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.525067][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.533010][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.540449][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.547954][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.555428][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.562957][T10459] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 944.610873][T10459] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 944.800285][T11863] veth0_macvtap: entered promiscuous mode [ 945.062747][T11863] veth1_macvtap: entered promiscuous mode [ 945.387800][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.461627][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.557643][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.646967][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 945.661476][ T25] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 945.670554][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.690864][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.714316][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.759804][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.777226][ T25] usb 1-1: config 0 descriptor?? [ 945.801130][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.805579][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 945.811684][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.832930][T11863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.842342][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.852969][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.863246][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.874065][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.884117][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.894817][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.905677][T11863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.916328][T11863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.927184][T11863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.956943][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 945.985723][T11863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.994571][T11863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.004515][T11863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.013483][T11863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.143324][ T25] usb 1-1: USB disconnect, device number 2 [ 946.317364][ T2459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.555965][ T2459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.815937][T12249] kernel profiling enabled (shift: 17) [ 948.440711][ T29] audit: type=1400 audit(1727934137.088:308): avc: denied { bind } for pid=12240 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 948.630163][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.708715][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.993082][T12266] binder: 12263:12266 ioctl c018620c 20000040 returned -1 [ 951.030512][ T5228] Bluetooth: hci4: command 0x0406 tx timeout [ 952.050681][ T29] audit: type=1400 audit(1727934139.588:309): avc: denied { bind } for pid=12254 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 952.251000][ T29] audit: type=1400 audit(1727934139.588:310): avc: denied { node_bind } for pid=12254 comm="syz.1.1059" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 952.443376][ T29] audit: type=1400 audit(1727934139.588:311): avc: denied { setopt } for pid=12254 comm="syz.1.1059" laddr=172.20.20.170 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 952.662132][ T29] audit: type=1400 audit(1727934139.598:312): avc: denied { write } for pid=12254 comm="syz.1.1059" laddr=172.20.20.170 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 953.046394][ T29] audit: type=1400 audit(1727934143.018:313): avc: denied { mount } for pid=12275 comm="syz.1.1063" name="/" dev="autofs" ino=51070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 953.440143][ T29] audit: type=1400 audit(1727934143.118:314): avc: denied { search } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.534536][ T29] audit: type=1400 audit(1727934143.188:315): avc: denied { bind } for pid=12279 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 953.706246][ T29] audit: type=1400 audit(1727934143.198:316): avc: denied { node_bind } for pid=12279 comm="syz.0.1065" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 953.815226][ T29] audit: type=1400 audit(1727934143.718:317): avc: denied { unmount } for pid=10749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 954.720866][ T29] audit: type=1400 audit(1727934144.398:318): avc: denied { read } for pid=12288 comm="syz.1.1069" path="socket:[51339]" dev="sockfs" ino=51339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 954.793817][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.803256][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.811428][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.819606][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.827786][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 954.835434][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.843389][ T5266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 954.879345][T12299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 954.886068][T12299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 954.906563][T12299] vhci_hcd vhci_hcd.0: Device attached [ 954.949689][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 955.000756][ T5266] usb 1-1: Using ep0 maxpacket: 32 [ 955.007782][ T5266] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 955.100737][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.167937][ T5266] usb 1-1: config 0 descriptor?? [ 955.206115][T12300] vhci_hcd: connection closed [ 955.207432][ T5266] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 955.228506][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 955.914427][ T5269] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 955.924351][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 955.932650][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 955.940421][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 955.948127][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 955.955826][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 955.964727][ T5266] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 955.984161][T12301] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 956.005712][ T3024] vhci_hcd: stop threads [ 956.012238][ T3024] vhci_hcd: release socket [ 956.018033][ T3024] vhci_hcd: disconnect device [ 956.090345][ T5266] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 956.315073][T12296] chnl_net:caif_netlink_parms(): no params data found [ 957.424285][ T5228] Bluetooth: hci3: command tx timeout [ 957.463436][ T8] usb 1-1: USB disconnect, device number 3 [ 957.478438][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 957.601353][ T8] keyspan 1-1:0.0: device disconnected [ 957.635986][T12324] 9pnet_fd: p9_fd_create_unix (12324): problem connecting socket: ./file1: -2 [ 957.694313][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 957.694333][ T29] audit: type=1400 audit(1727934147.878:320): avc: denied { create } for pid=12323 comm="syz.2.1075" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 957.759008][ T29] audit: type=1400 audit(1727934147.888:321): avc: denied { mounton } for pid=12323 comm="syz.2.1075" path="/35/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 957.782113][ T29] audit: type=1400 audit(1727934147.908:322): avc: denied { unlink } for pid=11306 comm="syz-executor" name="file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 958.416073][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.423299][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.430408][T12296] bridge_slave_0: entered allmulticast mode [ 958.438045][T12296] bridge_slave_0: entered promiscuous mode [ 958.449751][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.624972][T12345] process 'syz.3.1078' launched './file0' with NULL argv: empty string added [ 959.406279][ T29] audit: type=1400 audit(1727934148.868:323): avc: denied { execute } for pid=12339 comm="syz.3.1078" name="file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 959.431168][ T29] audit: type=1400 audit(1727934148.888:324): avc: denied { execute_no_trans } for pid=12339 comm="syz.3.1078" path="/3/file0" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 959.437292][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.160896][T12296] bridge_slave_1: entered allmulticast mode [ 960.387014][T12296] bridge_slave_1: entered promiscuous mode [ 960.658882][ T5228] Bluetooth: hci3: command tx timeout [ 960.791059][ T29] audit: type=1326 audit(1727934151.018:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12333 comm="syz.1.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1e877dff9 code=0x0 [ 961.389802][ T5269] vhci_hcd: vhci_device speed not set [ 961.593673][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.606637][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.744748][T12296] team0: Port device team_slave_0 added [ 961.789285][T12296] team0: Port device team_slave_1 added [ 962.008790][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.015880][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.062640][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.140780][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.178207][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.233406][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.467870][T12296] hsr_slave_0: entered promiscuous mode [ 962.506862][T12296] hsr_slave_1: entered promiscuous mode [ 962.539128][T12296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.580803][T12296] Cannot create hsr debugfs directory [ 962.670992][ T5228] Bluetooth: hci3: command tx timeout [ 963.712512][ T29] audit: type=1400 audit(1727934153.958:326): avc: denied { setopt } for pid=12395 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 963.892847][ T29] audit: type=1400 audit(1727934154.118:327): avc: denied { create } for pid=12402 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 963.912408][ T29] audit: type=1400 audit(1727934154.148:328): avc: denied { listen } for pid=12402 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 963.939114][ T29] audit: type=1400 audit(1727934154.188:329): avc: denied { accept } for pid=12402 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 963.983785][ T29] audit: type=1400 audit(1727934154.238:330): avc: denied { getopt } for pid=12409 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 964.187155][ T29] audit: type=1400 audit(1727934154.438:331): avc: denied { block_suspend } for pid=12415 comm="syz.1.1110" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 965.062728][ T29] audit: type=1400 audit(1727934154.768:332): avc: denied { connect } for pid=12403 comm="syz.2.1105" laddr=ff01::1 lport=36521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 965.110722][ T5228] Bluetooth: hci3: command tx timeout [ 965.186967][ T29] audit: type=1400 audit(1727934154.768:333): avc: denied { name_connect } for pid=12403 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 965.217651][T12296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.413407][ T5228] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 965.475223][T12296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.525985][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.533621][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.570411][ T5228] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 965.586249][ T5228] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 965.597981][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.620869][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.628294][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.648025][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.660687][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.668111][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.676961][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.684713][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.692559][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.699970][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.709295][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.721175][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.743032][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.776998][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.814277][T12296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.830745][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.853237][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.903179][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.916415][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.935126][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.948008][T12439] syzkaller0: entered allmulticast mode [ 965.953902][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.963523][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 965.989981][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.031501][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.038944][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.051110][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.086490][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.094068][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.102502][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.110373][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.118318][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.130420][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 966.170827][ T5269] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 966.383470][ T5269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 966.396716][ T5269] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 966.405971][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.410746][ T29] audit: type=1400 audit(1727934156.658:334): avc: denied { map } for pid=12458 comm="syz.0.1124" path="/66/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 966.428787][ T5269] usb 4-1: config 0 descriptor?? [ 966.468229][ T5269] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 966.687923][ T5269] usb 4-1: USB disconnect, device number 3 [ 967.991133][ T5269] IPVS: starting estimator thread 0... [ 968.112772][T12480] IPVS: using max 16 ests per chain, 38400 per kthread [ 968.627049][ T29] audit: type=1400 audit(1727934158.878:335): avc: denied { read } for pid=12485 comm="syz.3.1135" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 969.926960][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 972.088402][T12296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.445696][T12296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 972.519474][ T12] bridge_slave_1: left allmulticast mode [ 972.525472][ T12] bridge_slave_1: left promiscuous mode [ 972.531370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.829273][T12530] trusted_key: syz.3.1150 sent an empty control message without MSG_MORE. [ 972.882159][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 972.882205][ T29] audit: type=1400 audit(1727934163.078:338): avc: denied { bind } for pid=12524 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 973.865639][ T29] audit: type=1400 audit(1727934163.078:339): avc: denied { setopt } for pid=12524 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 973.885405][ T29] audit: type=1400 audit(1727934163.078:340): avc: denied { write } for pid=12524 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 974.178768][ T12] bridge_slave_0: left allmulticast mode [ 974.207690][ T12] bridge_slave_0: left promiscuous mode [ 974.246248][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.724043][T12552] usb usb1: usbfs: process 12552 (syz.0.1158) did not claim interface 0 before use [ 976.521490][T10459] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 976.676053][T10459] usb 3-1: no configurations [ 976.681275][T10459] usb 3-1: can't read configurations, error -22 [ 977.027917][T10459] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 977.287868][T10459] usb 3-1: no configurations [ 977.293159][T10459] usb 3-1: can't read configurations, error -22 [ 977.328115][T10459] usb usb3-port1: attempt power cycle [ 977.936178][ T29] audit: type=1400 audit(1727934168.178:341): avc: denied { connect } for pid=12570 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 977.998922][ T29] audit: type=1400 audit(1727934168.248:342): avc: denied { bind } for pid=12573 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 978.024831][T12574] netlink: 'syz.3.1166': attribute type 20 has an invalid length. [ 978.065662][ T29] audit: type=1400 audit(1727934168.278:343): avc: denied { setopt } for pid=12573 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 978.118084][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.128392][T10459] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 978.141098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.152141][T10459] usb 3-1: no configurations [ 978.156965][T10459] usb 3-1: can't read configurations, error -22 [ 978.170218][ T12] bond0 (unregistering): Released all slaves [ 978.190573][T12296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 978.293599][T10459] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 978.300826][T12296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 978.328381][T10459] usb 3-1: no configurations [ 978.336754][T10459] usb 3-1: can't read configurations, error -22 [ 978.347554][T10459] usb usb3-port1: unable to enumerate USB device [ 978.375934][T12296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 979.492201][T12586] syz.1.1169 uses obsolete (PF_INET,SOCK_PACKET) [ 979.813007][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.991854][ T29] audit: type=1400 audit(1727934170.158:344): avc: denied { read } for pid=12589 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 980.171203][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.450405][ T29] audit: type=1400 audit(1727934170.178:345): avc: denied { getopt } for pid=12589 comm="syz.3.1171" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 980.474556][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.481741][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.566424][ T29] audit: type=1400 audit(1727934170.188:346): avc: denied { setopt } for pid=12589 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 980.585854][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.593536][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.626997][ T29] audit: type=1400 audit(1727934170.878:347): avc: denied { read } for pid=12600 comm="syz.3.1173" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 980.671664][ T29] audit: type=1400 audit(1727934170.878:348): avc: denied { open } for pid=12600 comm="syz.3.1173" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 980.708958][T12605] capability: warning: `syz.1.1174' uses 32-bit capabilities (legacy support in use) [ 980.722345][T12605] overlayfs: missing 'lowerdir' [ 981.146896][ T29] audit: type=1400 audit(1727934170.898:349): avc: denied { ioctl } for pid=12600 comm="syz.3.1173" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 982.021466][ T29] audit: type=1400 audit(1727934172.158:350): avc: denied { unmount } for pid=12606 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 983.881411][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.987152][ T12] hsr_slave_0: left promiscuous mode [ 984.075230][ T12] hsr_slave_1: left promiscuous mode [ 984.204545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.220782][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.329671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.370937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.439679][ T12] veth1_macvtap: left promiscuous mode [ 984.472721][ T12] veth0_macvtap: left promiscuous mode [ 984.478368][ T12] veth1_vlan: left promiscuous mode [ 984.483772][ T12] veth0_vlan: left promiscuous mode [ 984.509070][ T5227] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 988.243067][ T12] team0 (unregistering): Port device team_slave_1 removed [ 989.409488][ T12] team0 (unregistering): Port device team_slave_0 removed [ 990.576531][T12296] veth0_vlan: entered promiscuous mode [ 990.587391][T12296] veth1_vlan: entered promiscuous mode [ 990.651373][T12296] veth0_macvtap: entered promiscuous mode [ 990.678771][T12296] veth1_macvtap: entered promiscuous mode [ 990.725782][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.776314][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.786840][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.797586][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.808238][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.819801][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.832171][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.845732][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.867528][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.877602][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.888234][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.902725][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.914698][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.925617][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.937125][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.949229][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.962003][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.973281][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.985131][T12296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.994301][T12296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.010889][T12296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.021091][T12296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.501447][ T5488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.509338][ T5488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.424100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.459105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.624407][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 992.624432][ T29] audit: type=1326 audit(1727934182.878:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.4.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08057dff9 code=0x0 [ 993.132479][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.176532][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.258436][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.277047][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.286574][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 993.300229][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.331069][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.337392][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.414180][T12786] chnl_net:caif_netlink_parms(): no params data found [ 994.671526][T12786] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.678644][T12786] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.686581][T12786] bridge_slave_0: entered allmulticast mode [ 994.693693][T12786] bridge_slave_0: entered promiscuous mode [ 994.714661][T12786] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.728894][T12786] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.736659][T12786] bridge_slave_1: entered allmulticast mode [ 994.851304][T12786] bridge_slave_1: entered promiscuous mode [ 995.420711][ T5228] Bluetooth: hci4: command tx timeout [ 996.281395][T12786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.294222][T12786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.305037][ T29] audit: type=1400 audit(1727934186.558:353): avc: denied { relabelfrom } for pid=12841 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 996.356820][ T29] audit: type=1400 audit(1727934186.588:354): avc: denied { relabelto } for pid=12841 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 996.538886][T12786] team0: Port device team_slave_0 added [ 996.548176][T12786] team0: Port device team_slave_1 added [ 996.659740][T12786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.669528][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.732229][T12786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.754119][T12786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.766348][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.792524][T12786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.945085][T12786] hsr_slave_0: entered promiscuous mode [ 997.091222][T12786] hsr_slave_1: entered promiscuous mode [ 997.246419][T12786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.254451][T12786] Cannot create hsr debugfs directory [ 997.644701][ T5228] Bluetooth: hci4: command tx timeout [ 998.439737][T12786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.647582][T12786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.132576][ T29] audit: type=1400 audit(1727934189.258:355): avc: denied { create } for pid=12900 comm="syz.1.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 999.328078][T12786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.503313][T12786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.602972][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.629290][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.648750][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.711032][ T5227] Bluetooth: hci4: command tx timeout [ 999.730032][ T29] audit: type=1400 audit(1727934189.978:356): avc: denied { read } for pid=12917 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 999.733077][T12786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 999.765707][T12786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 999.784565][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.799297][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 999.802071][T12786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 999.812437][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.865227][T12786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.064486][ T29] audit: type=1400 audit(1727934190.318:357): avc: denied { lock } for pid=12926 comm="syz.2.1303" path="socket:[53788]" dev="sockfs" ino=53788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1000.294852][T12786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.314626][T12786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.336110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.343358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.375516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.382700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.437968][T12786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1000.448639][T12786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.466736][ T29] audit: type=1400 audit(1727934190.718:358): avc: denied { write } for pid=12939 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1000.592925][T12914] chnl_net:caif_netlink_parms(): no params data found [ 1000.770448][ T29] audit: type=1400 audit(1727934190.908:359): avc: denied { mount } for pid=12952 comm="syz.1.1314" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1000.793604][ T29] audit: type=1400 audit(1727934190.958:360): avc: denied { unmount } for pid=10749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1000.814009][ T29] audit: type=1400 audit(1727934191.008:361): avc: denied { ioctl } for pid=12958 comm="syz.2.1318" path="socket:[53863]" dev="sockfs" ino=53863 ioctlcmd=0x697a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1000.999848][ T29] audit: type=1400 audit(1727934191.248:362): avc: denied { bind } for pid=12967 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1001.249294][T12914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.266175][T12914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.294318][T12914] bridge_slave_0: entered allmulticast mode [ 1001.331254][T12914] bridge_slave_0: entered promiscuous mode [ 1001.395679][T12786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.560817][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.588393][T12914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.629670][T12914] bridge_slave_1: entered allmulticast mode [ 1001.677901][T12914] bridge_slave_1: entered promiscuous mode [ 1001.799375][ T5227] Bluetooth: hci4: command tx timeout [ 1001.873554][T12914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.884155][ T5227] Bluetooth: hci2: command tx timeout [ 1001.915340][T12914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.164656][T12914] team0: Port device team_slave_0 added [ 1002.204879][T12914] team0: Port device team_slave_1 added [ 1002.925810][T12786] veth0_vlan: entered promiscuous mode [ 1002.937741][T12786] veth1_vlan: entered promiscuous mode [ 1002.992040][T12914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.019766][T12914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.087354][T12914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.101728][T12914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.108710][T12914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.209311][T12914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.951043][ T5227] Bluetooth: hci2: command tx timeout [ 1004.259263][T12914] hsr_slave_0: entered promiscuous mode [ 1004.293410][T12914] hsr_slave_1: entered promiscuous mode [ 1004.312727][ T29] audit: type=1400 audit(1727934194.568:363): avc: denied { ioctl } for pid=13023 comm="syz.2.1343" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1004.328383][T13026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1004.390925][T12914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.399068][T12914] Cannot create hsr debugfs directory [ 1004.809177][T12786] veth0_macvtap: entered promiscuous mode [ 1004.994382][T12786] veth1_macvtap: entered promiscuous mode [ 1005.267597][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.328515][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.359631][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.370791][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.388167][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.770733][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.794610][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.001969][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.036198][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.047332][ T5227] Bluetooth: hci2: command tx timeout [ 1006.076237][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.115078][T12786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.183513][T12914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.302673][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.333192][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.344205][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.354874][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.365284][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.376156][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.386652][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.397428][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.407341][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.417851][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.429122][T12786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.644368][T12786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.859346][T12786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.937000][T12786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.372823][T12786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.894089][T12914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.860868][ T29] audit: type=1400 audit(1727934199.068:364): avc: denied { bind } for pid=13059 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1008.891766][ T5227] Bluetooth: hci2: command tx timeout [ 1009.048626][T12914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.259432][T12914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.401749][ T5688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.409741][ T5688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.453156][T13086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1360'. [ 1009.526301][ T5688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.534414][ T5688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.895619][T13101] binder: 13097:13101 ioctl 4018620d 0 returned -22 [ 1011.026252][T13104] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 1012.617282][ T29] audit: type=1326 audit(1727934202.868:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cf517dff9 code=0x0 [ 1013.226513][T12914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1013.596090][T12914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1013.680529][T12914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1013.721402][T12914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.860747][T13129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1372'. [ 1015.578361][T12914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.624114][T12914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.636283][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.643389][ T5488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.691604][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 1015.802024][T12914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1015.834209][T12914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.116924][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.124238][ T5488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.012481][ T29] audit: type=1400 audit(1727934207.258:366): avc: denied { bind } for pid=13149 comm="syz.1.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1017.158740][ T29] audit: type=1400 audit(1727934207.378:367): avc: denied { write } for pid=13149 comm="syz.1.1377" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1018.065812][ T29] audit: type=1400 audit(1727934208.308:368): avc: denied { mounton } for pid=13168 comm="syz.2.1381" path="/proc/329/task" dev="proc" ino=55622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1018.307105][ T29] audit: type=1400 audit(1727934208.558:369): avc: denied { write } for pid=13177 comm="syz.4.1383" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1018.358759][T12914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.403793][T12914] veth0_vlan: entered promiscuous mode [ 1019.447411][T12914] veth1_vlan: entered promiscuous mode [ 1019.525289][ T29] audit: type=1400 audit(1727934209.778:370): avc: denied { write } for pid=13183 comm="syz.4.1386" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1019.614910][T12914] veth0_macvtap: entered promiscuous mode [ 1019.666336][T12914] veth1_macvtap: entered promiscuous mode [ 1019.909734][T13195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1020.612644][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.663274][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.831516][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.842073][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.852521][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.936434][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.946524][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.957144][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.967377][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.977893][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.987823][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.998700][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.010165][T12914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.023477][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.034140][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.044066][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.054704][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.064666][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.075463][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.085560][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.096133][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.106173][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.116796][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.127440][T12914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.138565][T12914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.150001][T12914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.172168][ T29] audit: type=1400 audit(1727934211.428:371): avc: denied { unmount } for pid=11306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1021.992739][T12914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.051002][T12914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.082290][T12914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.091227][T12914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.806249][ T29] audit: type=1400 audit(1727934214.058:372): avc: denied { write } for pid=4655 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.954481][ T29] audit: type=1400 audit(1727934214.058:373): avc: denied { remove_name } for pid=4655 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.014414][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.058223][ T29] audit: type=1400 audit(1727934214.058:374): avc: denied { add_name } for pid=4655 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.090235][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.182919][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.196621][T13232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.226460][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.249377][T13232] batadv_slave_0: entered promiscuous mode [ 1024.258657][T13232] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1024.265543][ T29] audit: type=1326 audit(1727934214.518:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.1.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1e877dff9 code=0x0 [ 1026.501093][ T5688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.134464][ T5688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.424418][T13266] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1402'. [ 1027.447533][ T5688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.950924][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1027.999490][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1028.010009][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1028.018672][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1028.032099][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1028.040396][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1028.047112][ T5688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.061436][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1028.123093][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1028.148105][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1028.201407][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1028.212698][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1028.225728][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1028.234859][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.245277][ T9] usb 3-1: config 0 descriptor?? [ 1028.265612][T13272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1029.102455][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 1029.320281][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1029.402196][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 1029.454106][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1029.570442][ T9] usb 3-1: USB disconnect, device number 11 [ 1029.702544][T13277] chnl_net:caif_netlink_parms(): no params data found [ 1029.763853][ T5688] bridge_slave_1: left allmulticast mode [ 1029.772027][ T5688] bridge_slave_1: left promiscuous mode [ 1029.777772][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.827520][ T5688] bridge_slave_0: left allmulticast mode [ 1029.853738][ T5688] bridge_slave_0: left promiscuous mode [ 1029.873399][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.803082][ T5227] Bluetooth: hci2: command tx timeout [ 1031.244365][ T1174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1031.765700][ T1174] usb 2-1: Using ep0 maxpacket: 16 [ 1031.864657][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.916768][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.145440][ T1174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.158489][ T1174] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1032.168322][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.180802][ T1174] usb 2-1: config 0 descriptor?? [ 1032.832991][ T5227] Bluetooth: hci2: command tx timeout [ 1033.148395][ T1174] HID 045e:07da: Invalid code 65791 type 1 [ 1033.162478][ T1174] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input14 [ 1033.953282][ T1174] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1033.983720][ T1174] usb 2-1: USB disconnect, device number 3 [ 1034.162085][ T29] audit: type=1400 audit(1727934224.338:376): avc: denied { mount } for pid=13320 comm="syz.4.1424" name="/" dev="ramfs" ino=56239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1034.459608][ T29] audit: type=1400 audit(1727934224.358:377): avc: denied { remount } for pid=13320 comm="syz.4.1424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1034.607948][ T5688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.645899][ T29] audit: type=1400 audit(1727934224.898:378): avc: denied { unmount } for pid=12296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1034.697377][ T5688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.737570][ T5688] bond0 (unregistering): Released all slaves [ 1034.949883][ T5228] Bluetooth: hci2: command tx timeout [ 1036.556280][ T5228] Bluetooth: hci5: command 0x0406 tx timeout [ 1037.215068][ T5228] Bluetooth: hci2: command tx timeout [ 1039.362176][ T29] audit: type=1400 audit(1727934229.508:379): avc: denied { ioctl } for pid=13364 comm="syz.2.1434" path="/dev/uhid" dev="devtmpfs" ino=1081 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1039.418919][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.447783][ T29] audit: type=1400 audit(1727934229.528:380): avc: denied { write } for pid=13369 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1039.468001][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.542083][T13277] bridge_slave_0: entered allmulticast mode [ 1039.571904][T13277] bridge_slave_0: entered promiscuous mode [ 1039.624799][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.652075][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.659365][T13277] bridge_slave_1: entered allmulticast mode [ 1039.672788][T13277] bridge_slave_1: entered promiscuous mode [ 1039.780767][ T5320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1041.070814][ T5320] usb 2-1: Using ep0 maxpacket: 16 [ 1041.077845][ T5320] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1041.088591][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.483523][ T5320] usb 2-1: config 0 descriptor?? [ 1042.001415][T13277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.033849][T13394] netlink: 'syz.4.1438': attribute type 2 has an invalid length. [ 1042.264118][T13277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.450011][ T5688] hsr_slave_0: left promiscuous mode [ 1042.492375][ T5688] hsr_slave_1: left promiscuous mode [ 1042.531718][ T5688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.539154][ T5688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.576786][ T5688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.591695][ T5688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.671962][ T5688] veth1_macvtap: left promiscuous mode [ 1042.678238][ T5688] veth0_macvtap: left promiscuous mode [ 1042.684046][ T5688] veth1_vlan: left promiscuous mode [ 1042.701452][ T5688] veth0_vlan: left promiscuous mode [ 1042.873990][ T9393] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1043.030732][ T9393] usb 4-1: Using ep0 maxpacket: 16 [ 1043.039580][ T9393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1043.051212][ T9393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57482, setting to 1024 [ 1043.062689][ T9393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1043.084127][ T5320] usbhid 2-1:0.0: can't add hid device: -71 [ 1043.087372][ T9393] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1043.090211][ T5320] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1043.099696][ T9393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.125549][ T9393] usb 4-1: config 0 descriptor?? [ 1043.185418][ T5320] usb 2-1: USB disconnect, device number 4 [ 1043.566916][ T9393] HID 045e:07da: Invalid code 65791 type 1 [ 1043.633184][ T9393] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input15 [ 1043.673875][ T29] audit: type=1400 audit(1727934233.918:381): avc: denied { nlmsg_write } for pid=13420 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1043.745697][ T9393] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1044.638061][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 1044.706758][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1044.765614][T13439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13439 comm=syz.3.1447 [ 1044.861641][ T9393] usb 4-1: USB disconnect, device number 4 [ 1044.908556][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1044.925254][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.936497][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.946364][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1044.960452][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1044.973052][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.997587][ T25] usb 3-1: config 0 descriptor?? [ 1045.445446][ T25] HID 045e:07da: Invalid code 65791 type 1 [ 1045.457278][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input16 [ 1045.521558][ T25] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1045.709595][ T1174] usb 3-1: USB disconnect, device number 12 [ 1045.827138][ T5688] team0 (unregistering): Port device team_slave_1 removed [ 1045.882416][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1045.921783][ T5688] team0 (unregistering): Port device team_slave_0 removed [ 1046.070697][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.084780][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1046.099863][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.110590][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.129397][ T25] usb 5-1: config 0 descriptor?? [ 1046.564810][ T25] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1046.607828][ T25] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1047.065373][T13277] team0: Port device team_slave_0 added [ 1047.076334][T13277] team0: Port device team_slave_1 added [ 1047.101744][T13277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.108739][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.136027][T13277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.201617][T13277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.235707][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 1047.238190][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.285485][ T9393] usb 5-1: USB disconnect, device number 3 [ 1047.429184][T13277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.796666][T13277] hsr_slave_0: entered promiscuous mode [ 1047.942176][T13277] hsr_slave_1: entered promiscuous mode [ 1048.126002][T13277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.267417][T13277] Cannot create hsr debugfs directory [ 1048.327113][T13461] Bluetooth: MGMT ver 1.23 [ 1048.401349][ T29] audit: type=1400 audit(1727934238.658:382): avc: denied { setopt } for pid=13455 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1048.526484][ T29] audit: type=1400 audit(1727934238.778:383): avc: denied { read } for pid=13477 comm="syz.1.1463" path="socket:[57173]" dev="sockfs" ino=57173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1048.981251][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1049.172855][ T25] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1049.284342][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1050.180703][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.250756][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1050.282200][ T25] usb 2-1: SerialNumber: syz [ 1050.432076][ T25] cdc_ether 2-1:1.0: skipping garbage [ 1050.438037][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1050.547100][ T29] audit: type=1400 audit(1727934240.798:384): avc: denied { nlmsg_read } for pid=13497 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1050.745617][ T5295] usb 2-1: USB disconnect, device number 5 [ 1051.010894][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1051.147193][ T29] audit: type=1326 audit(1727934241.398:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.204472][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.220941][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.233743][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.248280][ T29] audit: type=1326 audit(1727934241.428:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.249379][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1051.281215][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.313115][ T9] usb 4-1: config 0 descriptor?? [ 1051.392959][T13277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1051.437358][T13277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1051.486106][ T29] audit: type=1326 audit(1727934241.428:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.518008][T13277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1051.611324][ T29] audit: type=1326 audit(1727934241.428:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.640392][T13277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1051.821032][ T29] audit: type=1326 audit(1727934241.428:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.880938][ T29] audit: type=1326 audit(1727934241.428:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc562d7dff9 code=0x7ffc0000 [ 1051.923101][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1051.928281][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.929122][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1051.946423][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.978088][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.985297][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.272438][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.279628][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.298402][ T9] usb 4-1: USB disconnect, device number 5 [ 1053.075831][T13277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1053.095809][T13277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.209236][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1053.682731][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.693737][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1053.707813][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1053.715498][T13277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.718473][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.741177][ T25] usb 3-1: config 0 descriptor?? [ 1053.920380][T13277] veth0_vlan: entered promiscuous mode [ 1053.992395][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:1) [ 1054.018792][T13277] veth1_vlan: entered promiscuous mode [ 1054.161396][T13277] veth0_macvtap: entered promiscuous mode [ 1054.167633][ T25] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1054.195827][T13277] veth1_macvtap: entered promiscuous mode [ 1054.264722][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.303197][ T25] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1054.324198][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.365788][ T5320] usb 3-1: USB disconnect, device number 13 [ 1054.380673][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.391486][T13570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1483'. [ 1054.416814][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.436943][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.444128][T13570] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 1054.447535][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.465323][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.476756][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.486682][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.497218][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.509667][T13277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.520542][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.531090][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.541025][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.553116][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.563305][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.574075][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.584144][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.594714][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.605175][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.616309][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.626277][T13277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.637200][T13277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.648389][T13277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.697839][T13277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.701058][ T29] audit: type=1400 audit(1727934244.948:391): avc: denied { write } for pid=13576 comm="syz.1.1486" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1054.708074][T13277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.753403][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.759737][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.775632][T13277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.784472][T13277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.610145][ T5468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.694495][ T5468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.819834][ T2459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.827808][ T2459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.373320][T13660] Driver unsupported XDP return value 0 on prog (id 637) dev N/A, expect packet loss! [ 1059.954823][ T5488] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.990017][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.004775][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.015490][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.027384][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.111239][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1060.121721][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1061.299748][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 1062.384068][ T29] audit: type=1326 audit(1727934252.578:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13699 comm="syz.2.1515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc562d7dff9 code=0x0 [ 1062.500121][ T5488] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.704558][ T5488] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.940119][ T5488] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.277962][ T5227] Bluetooth: hci2: command tx timeout [ 1063.485598][T13717] hub 9-0:1.0: USB hub found [ 1063.492657][T13717] hub 9-0:1.0: 8 ports detected [ 1064.614590][ T5488] bridge_slave_1: left allmulticast mode [ 1064.674484][ T5488] bridge_slave_1: left promiscuous mode [ 1064.734532][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.924844][ T5488] bridge_slave_0: left allmulticast mode [ 1065.024157][ T5488] bridge_slave_0: left promiscuous mode [ 1065.100801][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.441591][ T5227] Bluetooth: hci2: command tx timeout [ 1065.892058][T13763] binder: 13761:13763 unknown command 1953002597 [ 1065.915826][T13763] binder: 13761:13763 ioctl c0306201 20000080 returned -22 [ 1067.470797][ T5227] Bluetooth: hci2: command tx timeout [ 1067.528440][ T5488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.557014][ T5488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.624313][ T5488] bond0 (unregistering): Released all slaves [ 1067.664784][T13673] chnl_net:caif_netlink_parms(): no params data found [ 1069.169408][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1069.169930][T13673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.186353][T13673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.193785][T13673] bridge_slave_0: entered allmulticast mode [ 1069.202321][T13673] bridge_slave_0: entered promiscuous mode [ 1069.258408][T13673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.265650][T13673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.273315][T13673] bridge_slave_1: entered allmulticast mode [ 1069.280429][T13673] bridge_slave_1: entered promiscuous mode [ 1069.425736][T13673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.437375][ T29] audit: type=1400 audit(1727934259.688:393): avc: denied { ioctl } for pid=13806 comm="syz.3.1536" path="socket:[59555]" dev="sockfs" ino=59555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1069.464890][ T29] audit: type=1400 audit(1727934259.708:394): avc: denied { bind } for pid=13806 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1069.487958][ T29] audit: type=1400 audit(1727934259.718:395): avc: denied { write } for pid=13806 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1069.512154][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1069.520103][T13673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.532497][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.554392][ T5227] Bluetooth: hci2: command tx timeout [ 1069.573120][ C0] ------------[ cut here ]------------ [ 1069.578884][ C0] refcount_t: underflow; use-after-free. [ 1069.585485][ C0] WARNING: CPU: 0 PID: 5468 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 1069.594974][ C0] Modules linked in: [ 1069.598913][ C0] CPU: 0 UID: 0 PID: 5468 Comm: kworker/u8:8 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1069.609842][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1069.619982][ C0] Workqueue: events_unbound cfg80211_wiphy_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1069.626345][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 1069.632611][ C0] Code: ff 89 de e8 78 1c fe fc 84 db 0f 85 66 ff ff ff e8 8b 1a fe fc c6 05 e0 7e b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 17 03 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 68 1a fe fc 0f b6 1d bb 7e b8 0b 31 [ 1069.652336][ C0] RSP: 0018:ffffc90000007948 EFLAGS: 00010282 [ 1069.658484][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e7329 [ 1069.666562][ C0] RDX: ffff88807d3c8000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 1069.674633][ C0] RBP: ffff88807eef1ea4 R08: 0000000000000001 R09: 0000000000000000 [ 1069.682066][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 1069.682686][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 1069.699530][ C0] R13: 0000000000000000 R14: ffff88807eef1ea4 R15: ffff88805dc33319 [ 1069.707607][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1069.716637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1069.723314][ C0] CR2: 000000110c310614 CR3: 000000007a020000 CR4: 00000000003526f0 [ 1069.731410][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1069.739422][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1069.747519][ C0] Call Trace: [ 1069.750863][ C0] [ 1069.753746][ C0] ? __warn+0xea/0x3d0 [ 1069.757886][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 1069.763559][ C0] ? report_bug+0x3c0/0x580 [ 1069.768126][ C0] ? handle_bug+0x54/0xa0 [ 1069.772576][ C0] ? exc_invalid_op+0x17/0x50 [ 1069.777318][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1069.782479][ C0] ? __warn_printk+0x199/0x350 [ 1069.787298][ C0] ? __warn_printk+0x1a6/0x350 [ 1069.792186][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 1069.797791][ C0] ? refcount_warn_saturate+0x149/0x210 [ 1069.803432][ C0] sk_skb_reason_drop+0x183/0x1a0 [ 1069.808550][ C0] j1939_xtp_rx_cts+0x622/0xf50 [ 1069.813611][ C0] j1939_tp_recv+0x568/0xf50 [ 1069.818275][ C0] j1939_can_recv+0x78f/0xa50 [ 1069.823085][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 1069.828352][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1069.834115][ C0] ? rcu_is_watching+0x12/0xc0 [ 1069.838935][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1069.844254][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 1069.849515][ C0] can_rcv_filter+0x2a8/0x900 [ 1069.854309][ C0] can_receive+0x320/0x5c0 [ 1069.858801][ C0] ? __pfx_can_rcv+0x10/0x10 [ 1069.863518][ C0] can_rcv+0x1e2/0x280 [ 1069.867651][ C0] __netif_receive_skb_one_core+0x1b1/0x1e0 [ 1069.873650][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1069.880144][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1069.885501][ C0] ? process_backlog+0x3f1/0x15f0 [ 1069.890638][ C0] ? process_backlog+0x3f1/0x15f0 [ 1069.895723][ C0] __netif_receive_skb+0x1d/0x160 [ 1069.900855][ C0] process_backlog+0x443/0x15f0 [ 1069.905791][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1069.911308][ C0] net_rx_action+0xa92/0x1010 [ 1069.916069][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1069.921300][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1069.926127][ C0] ? rcu_is_watching+0x12/0xc0 [ 1069.931012][ C0] ? trace_rcu_utilization+0x100/0x160 [ 1069.936542][ C0] ? rcu_core+0xada/0x14d0 [ 1069.941089][ C0] ? mark_held_locks+0x9f/0xe0 [ 1069.945916][ C0] handle_softirqs+0x213/0x8f0 [ 1069.950789][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1069.956160][ C0] ? ieee80211_ibss_work+0x385/0x14c0 [ 1069.961635][ C0] do_softirq+0xb2/0xf0 [ 1069.965864][ C0] [ 1069.968827][ C0] [ 1069.971848][ C0] __local_bh_enable_ip+0x100/0x120 [ 1069.977104][ C0] ieee80211_ibss_work+0x385/0x14c0 [ 1069.982411][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1069.987667][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1069.992549][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 1069.998344][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1070.003744][ C0] ? find_held_lock+0x2d/0x110 [ 1070.008575][ C0] ? skb_dequeue+0x126/0x180 [ 1070.013279][ C0] ? __pfx_lock_release+0x10/0x10 [ 1070.018373][ C0] ? mark_held_locks+0x9f/0xe0 [ 1070.023266][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1070.029142][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1070.034470][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1070.040344][ C0] ieee80211_iface_work+0xd01/0xf00 [ 1070.045685][ C0] cfg80211_wiphy_work+0x3d9/0x550 [ 1070.050952][ C0] process_one_work+0x9c5/0x1ba0 [ 1070.055974][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1070.061732][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1070.067177][ C0] ? assign_work+0x1a0/0x250 [ 1070.071898][ C0] worker_thread+0x6c8/0xf00 [ 1070.076558][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1070.081792][ C0] kthread+0x2c1/0x3a0 [ 1070.085927][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.091231][ C0] ? __pfx_kthread+0x10/0x10 [ 1070.095898][ C0] ret_from_fork+0x45/0x80 [ 1070.100370][ C0] ? __pfx_kthread+0x10/0x10 [ 1070.105104][ C0] ret_from_fork_asm+0x1a/0x30 [ 1070.109955][ C0] [ 1070.113062][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1070.120385][ C0] CPU: 0 UID: 0 PID: 5468 Comm: kworker/u8:8 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1070.131283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1070.141360][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1070.147634][ C0] Call Trace: [ 1070.150918][ C0] [ 1070.153767][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1070.158382][ C0] panic+0x71d/0x800 [ 1070.162305][ C0] ? __pfx_panic+0x10/0x10 [ 1070.166747][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 1070.171978][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1070.177140][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 1070.182715][ C0] check_panic_on_warn+0xab/0xb0 [ 1070.187697][ C0] __warn+0xf6/0x3d0 [ 1070.191625][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 1070.197191][ C0] report_bug+0x3c0/0x580 [ 1070.201549][ C0] handle_bug+0x54/0xa0 [ 1070.205730][ C0] exc_invalid_op+0x17/0x50 [ 1070.210255][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1070.215132][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 1070.221318][ C0] Code: ff 89 de e8 78 1c fe fc 84 db 0f 85 66 ff ff ff e8 8b 1a fe fc c6 05 e0 7e b8 0b 01 90 48 c7 c7 40 4a d1 8b e8 17 03 bf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 68 1a fe fc 0f b6 1d bb 7e b8 0b 31 [ 1070.240957][ C0] RSP: 0018:ffffc90000007948 EFLAGS: 00010282 [ 1070.247058][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814e7329 [ 1070.255038][ C0] RDX: ffff88807d3c8000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 1070.263036][ C0] RBP: ffff88807eef1ea4 R08: 0000000000000001 R09: 0000000000000000 [ 1070.271020][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 1070.279002][ C0] R13: 0000000000000000 R14: ffff88807eef1ea4 R15: ffff88805dc33319 [ 1070.286992][ C0] ? __warn_printk+0x199/0x350 [ 1070.291785][ C0] ? __warn_printk+0x1a6/0x350 [ 1070.296604][ C0] ? refcount_warn_saturate+0x149/0x210 [ 1070.302196][ C0] sk_skb_reason_drop+0x183/0x1a0 [ 1070.307252][ C0] j1939_xtp_rx_cts+0x622/0xf50 [ 1070.312140][ C0] j1939_tp_recv+0x568/0xf50 [ 1070.316767][ C0] j1939_can_recv+0x78f/0xa50 [ 1070.321483][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 1070.326710][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1070.332362][ C0] ? rcu_is_watching+0x12/0xc0 [ 1070.337156][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1070.342394][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 1070.347615][ C0] can_rcv_filter+0x2a8/0x900 [ 1070.352319][ C0] can_receive+0x320/0x5c0 [ 1070.356760][ C0] ? __pfx_can_rcv+0x10/0x10 [ 1070.361367][ C0] can_rcv+0x1e2/0x280 [ 1070.365455][ C0] __netif_receive_skb_one_core+0x1b1/0x1e0 [ 1070.371374][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1070.377819][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1070.383044][ C0] ? process_backlog+0x3f1/0x15f0 [ 1070.388100][ C0] ? process_backlog+0x3f1/0x15f0 [ 1070.393146][ C0] __netif_receive_skb+0x1d/0x160 [ 1070.398203][ C0] process_backlog+0x443/0x15f0 [ 1070.403085][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1070.408486][ C0] net_rx_action+0xa92/0x1010 [ 1070.413201][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1070.418331][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1070.423112][ C0] ? rcu_is_watching+0x12/0xc0 [ 1070.427894][ C0] ? trace_rcu_utilization+0x100/0x160 [ 1070.433380][ C0] ? rcu_core+0xada/0x14d0 [ 1070.437826][ C0] ? mark_held_locks+0x9f/0xe0 [ 1070.442607][ C0] handle_softirqs+0x213/0x8f0 [ 1070.447462][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1070.452766][ C0] ? ieee80211_ibss_work+0x385/0x14c0 [ 1070.458162][ C0] do_softirq+0xb2/0xf0 [ 1070.462338][ C0] [ 1070.465271][ C0] [ 1070.468209][ C0] __local_bh_enable_ip+0x100/0x120 [ 1070.473427][ C0] ieee80211_ibss_work+0x385/0x14c0 [ 1070.478656][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1070.483872][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1070.488648][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 1070.494310][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1070.499620][ C0] ? find_held_lock+0x2d/0x110 [ 1070.504407][ C0] ? skb_dequeue+0x126/0x180 [ 1070.509019][ C0] ? __pfx_lock_release+0x10/0x10 [ 1070.514066][ C0] ? mark_held_locks+0x9f/0xe0 [ 1070.518845][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1070.524669][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1070.529890][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1070.535809][ C0] ieee80211_iface_work+0xd01/0xf00 [ 1070.541046][ C0] cfg80211_wiphy_work+0x3d9/0x550 [ 1070.546189][ C0] process_one_work+0x9c5/0x1ba0 [ 1070.551150][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1070.556804][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1070.562207][ C0] ? assign_work+0x1a0/0x250 [ 1070.566827][ C0] worker_thread+0x6c8/0xf00 [ 1070.571446][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1070.576577][ C0] kthread+0x2c1/0x3a0 [ 1070.580672][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.585897][ C0] ? __pfx_kthread+0x10/0x10 [ 1070.590508][ C0] ret_from_fork+0x45/0x80 [ 1070.594936][ C0] ? __pfx_kthread+0x10/0x10 [ 1070.599551][ C0] ret_from_fork_asm+0x1a/0x30 [ 1070.604355][ C0] [ 1070.607513][ C0] Kernel Offset: disabled [ 1070.611831][ C0] Rebooting in 86400 seconds..