last executing test programs: 29.184487896s ago: executing program 4 (id=1453): r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 28.678048688s ago: executing program 4 (id=1455): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)=0xb3) 28.04958872s ago: executing program 4 (id=1459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0) 27.801897943s ago: executing program 4 (id=1462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 27.669171929s ago: executing program 4 (id=1465): r0 = io_uring_setup(0x30d3, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000001c0)=""/4120, 0x1018}, {&(0x7f0000001340)=""/134, 0x86}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000002500)=""/108, 0x6c}, {&(0x7f0000001240)=""/50, 0x32}, {&(0x7f0000001280)=""/154, 0x9a}, {&(0x7f00000035c0)=""/4103, 0x1007}, {&(0x7f0000002340)=""/243, 0xf3}], 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000001004b0000080000400000000000000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtfilter={0x10e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x10b0, 0x2, [@TCA_BASIC_EMATCHES={0x10ac, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff, 0x7, 0x4}, {{0x3, 0x1, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x7f, 0x2, 0x80}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{}, {0xa6, 0x8000, 0x9, 0x0, 0x0, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x2}, {0x7, 0x3f, 0x7, 0x20}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0x4, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4d}}, @TCA_EMATCH_TREE_LIST={0x102c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x92bb}, {0x4, 0x7fffffff, 0x20, 0x2, 0x7, 0x0, 0x3}}}, @TCF_EM_IPT={0x1010, 0x0, 0x0, 0x0, {{0xff, 0x9, 0x92}, [@TCA_EM_IPT_MATCH_DATA={0x1003, 0x5, "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"}]}}]}]}]}}]}, 0x10e0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x1901000000000000) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[], 0xc9c8) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000140), 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x25}, {0x6}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x35, &(0x7f0000000040), 0x4) close_range(r0, r8, 0x0) 27.258518191s ago: executing program 4 (id=1469): socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)=0xb3) 6.196404713s ago: executing program 2 (id=1561): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x7ff) ppoll(&(0x7f0000000080)=[{r0, 0xc011}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 6.110774154s ago: executing program 3 (id=1562): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32], 0x3c}}, 0x0) 5.612383062s ago: executing program 3 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) getpgrp(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x2b, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1c8, 0xc0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 5.510968917s ago: executing program 0 (id=1567): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 5.498815919s ago: executing program 2 (id=1568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 2.259671091s ago: executing program 1 (id=1569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0}, 0x90) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) 2.151708338s ago: executing program 2 (id=1570): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) 1.790849008s ago: executing program 1 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000540)="402b801dbf1801444f3e2de5beb13cb286650aa9cf", 0x15}], 0x1}}], 0x1, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)={0x14}, 0xc3ec}}, 0x0) 1.677783672s ago: executing program 0 (id=1572): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.286502375s ago: executing program 1 (id=1576): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000002, 0x3) 1.225193399s ago: executing program 0 (id=1577): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0xff000, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x81, 0x2f, 0x0, @empty, @local, {[@noop, @ssrr={0x89, 0x13, 0xbb, [@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, @private=0xa010102]}]}}}}}) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000004c0)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80), 0x4) 1.107222281s ago: executing program 1 (id=1578): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.04583484s ago: executing program 2 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 846.359322ms ago: executing program 0 (id=1580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0}, 0x90) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) 685.455727ms ago: executing program 2 (id=1581): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 383.649819ms ago: executing program 0 (id=1582): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200a00, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) r4 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x52e, 0x0, 0x0, 0x0, 0x0) 209.785838ms ago: executing program 3 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) getpgrp(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x2b, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1c8, 0xc0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 0s ago: executing program 1 (id=1584): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 351.134094][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.160785][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.188837][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.210629][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.221420][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.378207][ C0] eth0: bad gso: type: 1, size: 1408 [ 351.680972][ T5277] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 351.890590][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 351.952510][ T5277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 351.977835][ T9037] chnl_net:caif_netlink_parms(): no params data found [ 352.033768][ T5277] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 352.061850][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 352.138202][ T5277] usb 1-1: Product: syz [ 352.176647][ T5277] usb 1-1: Manufacturer: syz [ 352.194715][ T5277] usb 1-1: SerialNumber: syz [ 352.252424][ T29] audit: type=1400 audit(1722065587.879:1956): avc: denied { name_bind } for pid=9057 comm="syz.3.1342" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 352.339412][ T5277] usb 1-1: config 0 descriptor?? [ 352.415809][ T9048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.436404][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.490544][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.498563][ T9037] bridge_slave_0: entered allmulticast mode [ 352.506515][ T9061] netlink: set zone limit has 4 unknown bytes [ 352.547282][ T9037] bridge_slave_0: entered promiscuous mode [ 352.585788][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.609082][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.629552][ T9037] bridge_slave_1: entered allmulticast mode [ 352.641429][ T9037] bridge_slave_1: entered promiscuous mode [ 352.738230][ T5228] usb 1-1: USB disconnect, device number 26 [ 352.829256][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.896835][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.917351][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 353.130651][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 353.146837][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 353.221400][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 353.256158][ T9037] team0: Port device team_slave_0 added [ 353.300485][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.307288][ T9037] team0: Port device team_slave_1 added [ 353.339488][ T8] usb 4-1: Product: syz [ 353.344244][ T8] usb 4-1: Manufacturer: syz [ 353.349384][ T8] usb 4-1: SerialNumber: syz [ 353.380063][ T5229] Bluetooth: hci3: command tx timeout [ 353.450949][ T5228] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 353.665218][ T8] usb 4-1: USB disconnect, device number 21 [ 353.722208][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 353.763218][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.801441][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.853884][ T5228] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 353.892874][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.902343][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.914679][ T5228] usb 1-1: Product: syz [ 353.919511][ T5228] usb 1-1: Manufacturer: syz [ 353.937000][ T5228] usb 1-1: SerialNumber: syz [ 353.949550][ T5228] usb 1-1: config 0 descriptor?? [ 353.995496][ T9048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.027126][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.046550][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.079229][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.077947][ T8] usb 1-1: USB disconnect, device number 27 [ 355.159447][ T9037] hsr_slave_0: entered promiscuous mode [ 355.221221][ T9037] hsr_slave_1: entered promiscuous mode [ 355.251702][ T9037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.264351][ T9037] Cannot create hsr debugfs directory [ 355.303031][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=9089 comm=syz.4.1352 [ 355.320012][ T9082] IPVS: Scheduler module ip_vs_sip not found [ 355.340653][ T9079] IPVS: length: 8 != 992756864 [ 355.421067][ C0] eth0: bad gso: type: 1, size: 1408 [ 355.451711][ T5229] Bluetooth: hci3: command tx timeout [ 356.727562][ T9037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.923471][ T9037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.046882][ T9037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.110981][ T5277] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 357.156271][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 357.156564][ T9120] IPVS: Scheduler module ip_vs_sip not found [ 357.175270][ T9122] IPVS: length: 8 != 992756864 [ 357.207611][ T9037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.300529][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 357.318792][ T5277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 357.321009][ T25] usb 4-1: device descriptor read/64, error -71 [ 357.368671][ T5277] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.410502][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.431026][ T5277] usb 3-1: Product: syz [ 357.435374][ T5277] usb 3-1: Manufacturer: syz [ 357.440024][ T5277] usb 3-1: SerialNumber: syz [ 357.501652][ T5277] usb 3-1: config 0 descriptor?? [ 357.509048][ T9113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.533504][ T5229] Bluetooth: hci3: command tx timeout [ 357.630674][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 357.648887][ T9037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.702471][ T9037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.740192][ T9037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.789882][ T9037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.810746][ T25] usb 4-1: device descriptor read/64, error -71 [ 357.822452][ T5277] usb 3-1: USB disconnect, device number 20 [ 357.951026][ T25] usb usb4-port1: attempt power cycle [ 358.026791][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.037439][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.047425][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.072486][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.081055][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.089444][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.294684][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.407153][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 358.488892][ T25] usb 4-1: device descriptor read/8, error -71 [ 358.816166][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 358.932971][ T25] usb 4-1: device descriptor read/8, error -71 [ 359.071927][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.091930][ T25] usb usb4-port1: unable to enumerate USB device [ 359.115572][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.209828][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.234709][ T939] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 359.248685][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.292943][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.371530][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.378776][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.456264][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 359.477830][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.485317][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.499828][ T939] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.514303][ T939] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.537831][ T939] usb 3-1: Product: syz [ 359.550559][ T939] usb 3-1: Manufacturer: syz [ 359.602397][ T5229] Bluetooth: hci3: command tx timeout [ 359.611355][ T939] usb 3-1: SerialNumber: syz [ 359.638438][ T939] usb 3-1: config 0 descriptor?? [ 359.659945][ T9113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.944030][ T52] bridge_slave_1: left allmulticast mode [ 359.969944][ T5278] usb 3-1: USB disconnect, device number 21 [ 359.974796][ T52] bridge_slave_1: left promiscuous mode [ 360.014877][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.101948][ T52] bridge_slave_0: left allmulticast mode [ 360.122734][ T52] bridge_slave_0: left promiscuous mode [ 360.128571][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.161050][ T5229] Bluetooth: hci1: command tx timeout [ 360.410676][ T29] audit: type=1326 audit(1722065596.039:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.2.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc68d77299 code=0x0 [ 360.807187][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.827717][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.840577][ T52] bond0 (unregistering): Released all slaves [ 360.865005][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1373'. [ 360.962887][ T29] audit: type=1400 audit(1722065596.589:1958): avc: denied { read } for pid=9165 comm="syz.0.1376" path="socket:[22826]" dev="sockfs" ino=22826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 361.037381][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 361.121990][ T52] batman_adv: batadv0: Interface deactivated: wlan1 [ 361.191787][ T52] batman_adv: batadv0: Removing interface: wlan1 [ 362.244954][ T5229] Bluetooth: hci1: command tx timeout [ 362.340086][ T52] hsr_slave_0: left promiscuous mode [ 362.362989][ T52] hsr_slave_1: left promiscuous mode [ 362.394495][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.403924][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.424463][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.432231][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.484816][ T52] veth1_macvtap: left promiscuous mode [ 362.491154][ T5278] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 362.510332][ T52] veth0_macvtap: left promiscuous mode [ 362.520209][ T52] veth1_vlan: left promiscuous mode [ 362.526086][ T52] veth0_vlan: left promiscuous mode [ 362.550472][ T942] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 362.660708][ T5278] usb 4-1: device descriptor read/64, error -71 [ 362.750935][ T942] usb 3-1: Using ep0 maxpacket: 32 [ 362.773476][ T942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 362.787974][ T942] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 362.799998][ T942] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 362.814924][ T942] usb 3-1: Product: syz [ 362.819676][ T942] usb 3-1: Manufacturer: syz [ 362.827865][ T942] usb 3-1: SerialNumber: syz [ 362.845596][ T942] usb 3-1: config 0 descriptor?? [ 362.862229][ T9185] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 362.981714][ T5278] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 363.108990][ T25] usb 3-1: USB disconnect, device number 22 [ 363.170548][ T5278] usb 4-1: device descriptor read/64, error -71 [ 363.313654][ T5278] usb usb4-port1: attempt power cycle [ 363.726529][ T52] team0 (unregistering): Port device team_slave_1 removed [ 363.740585][ T5278] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 363.785660][ T5278] usb 4-1: device descriptor read/8, error -71 [ 363.805520][ T5316] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 363.824245][ T52] team0 (unregistering): Port device team_slave_0 removed [ 363.994960][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 364.021632][ T5316] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 364.058092][ T5316] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 364.066940][ T5316] usb 3-1: Product: syz [ 364.078932][ T5278] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 364.079902][ T5316] usb 3-1: Manufacturer: syz [ 364.110625][ T5316] usb 3-1: SerialNumber: syz [ 364.121985][ T5278] usb 4-1: device descriptor read/8, error -71 [ 364.122104][ T5316] usb 3-1: config 0 descriptor?? [ 364.197452][ T9185] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 364.262488][ T5278] usb usb4-port1: unable to enumerate USB device [ 364.339496][ T5229] Bluetooth: hci1: command tx timeout [ 364.745689][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.761065][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.769183][ T9130] bridge_slave_0: entered allmulticast mode [ 364.779579][ T9130] bridge_slave_0: entered promiscuous mode [ 364.805204][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.841496][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.848927][ T9130] bridge_slave_1: entered allmulticast mode [ 364.863537][ T9130] bridge_slave_1: entered promiscuous mode [ 364.891133][ T9037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.076804][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.128080][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.284322][ T9130] team0: Port device team_slave_0 added [ 365.355364][ T9130] team0: Port device team_slave_1 added [ 365.577819][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.601081][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.007898][ T5229] Bluetooth: hci1: command tx timeout [ 367.042866][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.089889][ T5228] usb 3-1: USB disconnect, device number 23 [ 367.123147][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.161030][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.397387][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.503927][ T9130] hsr_slave_0: entered promiscuous mode [ 368.511519][ T9130] hsr_slave_1: entered promiscuous mode [ 368.521522][ T9130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.529112][ T9130] Cannot create hsr debugfs directory [ 368.585569][ T9037] veth0_vlan: entered promiscuous mode [ 368.637657][ T9037] veth1_vlan: entered promiscuous mode [ 368.800720][ T5278] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.887688][ T9037] veth0_macvtap: entered promiscuous mode [ 368.912317][ T9037] veth1_macvtap: entered promiscuous mode [ 368.977981][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.004372][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.020009][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.045512][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 369.050486][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.068426][ T5278] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 369.097779][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.112367][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.132648][ T5278] usb 1-1: config 0 descriptor?? [ 369.140647][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.142153][ T5278] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 369.178061][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.200429][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.210320][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.240428][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.263465][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.335749][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.357529][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.378944][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.412245][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.433767][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.474910][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.500420][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.520529][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.540560][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.570416][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.597080][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.638182][ T9037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.659920][ T9037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.692712][ T9037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.710521][ T9037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.031138][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.043479][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.060884][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.086415][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.110662][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 370.118828][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.170159][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.200469][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.344304][ T9037] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 370.356570][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.366756][ T9037] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 370.377860][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.466001][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.474449][ T9130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.483133][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.517571][ T9130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.544799][ T9130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.589721][ T9130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.596799][ T5277] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 370.679433][ T2914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.761349][ T9244] block nbd1: NBD_DISCONNECT [ 370.769284][ T9244] block nbd1: Disconnected due to user request. [ 370.776989][ T9244] block nbd1: shutting down sockets [ 370.812052][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 370.819339][ T2914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.847599][ T5277] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.888372][ T5277] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.927620][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.950450][ T5277] usb 4-1: Product: syz [ 370.954675][ T5277] usb 4-1: Manufacturer: syz [ 370.959382][ T5277] usb 4-1: SerialNumber: syz [ 370.983787][ T2914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.000070][ T5277] usb 4-1: config 0 descriptor?? [ 371.024650][ T9242] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 371.126722][ T2914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.282825][ T5228] usb 4-1: USB disconnect, device number 30 [ 371.456276][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.470897][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 371.562255][ T5228] usb 1-1: USB disconnect, device number 28 [ 371.832220][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.898257][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.955190][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.969863][ T9235] bridge_slave_0: entered allmulticast mode [ 371.992732][ T9235] bridge_slave_0: entered promiscuous mode [ 372.000735][ T5277] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 372.017827][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.036889][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.052849][ T9235] bridge_slave_1: entered allmulticast mode [ 372.071558][ T9235] bridge_slave_1: entered promiscuous mode [ 372.135420][ T2914] bridge_slave_1: left allmulticast mode [ 372.154767][ T2914] bridge_slave_1: left promiscuous mode [ 372.170793][ T5229] Bluetooth: hci6: command tx timeout [ 372.180861][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.224063][ T2914] bridge_slave_0: left allmulticast mode [ 372.229875][ T2914] bridge_slave_0: left promiscuous mode [ 372.261691][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 372.274570][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.303422][ T5277] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 372.325883][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 372.344937][ T5277] usb 4-1: Product: syz [ 372.349158][ T5277] usb 4-1: Manufacturer: syz [ 372.359028][ T5277] usb 4-1: SerialNumber: syz [ 372.367265][ T5277] usb 4-1: config 0 descriptor?? [ 372.381981][ T9242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 373.236548][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.254198][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.268780][ T2914] bond0 (unregistering): Released all slaves [ 373.281465][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 373.285118][ T2914] bond1 (unregistering): Released all slaves [ 373.379210][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.386548][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.445156][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.468946][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.480479][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 373.498983][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.516892][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.525579][ T5316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.551933][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.585078][ T46] usb 1-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 373.601199][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.617349][ T46] usb 1-1: config 0 descriptor?? [ 373.733289][ T9235] team0: Port device team_slave_0 added [ 373.863288][ T9235] team0: Port device team_slave_1 added [ 373.996431][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.007449][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.036635][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.048465][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 374.058855][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.070912][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 374.081762][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.094962][ T939] usb 4-1: USB disconnect, device number 31 [ 374.123766][ T46] usb 1-1: USB disconnect, device number 29 [ 374.139541][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.175278][ T2914] hsr_slave_0: left promiscuous mode [ 374.188077][ T2914] hsr_slave_1: left promiscuous mode [ 374.198265][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.206301][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.215359][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.224324][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.240632][ T5229] Bluetooth: hci6: command tx timeout [ 374.256378][ T2914] veth1_macvtap: left promiscuous mode [ 374.262086][ T2914] veth0_macvtap: left promiscuous mode [ 374.267808][ T2914] veth1_vlan: left promiscuous mode [ 374.274108][ T2914] veth0_vlan: left promiscuous mode [ 375.417367][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 375.480252][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 375.940969][ T9307] block nbd0: NBD_DISCONNECT [ 375.950335][ T9307] block nbd0: Disconnected due to user request. [ 375.957163][ T9307] block nbd0: shutting down sockets [ 376.321282][ T5229] Bluetooth: hci6: command tx timeout [ 376.338819][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 376.452059][ T9235] hsr_slave_0: entered promiscuous mode [ 376.460168][ T9235] hsr_slave_1: entered promiscuous mode [ 376.474211][ T9235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.533021][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 376.553455][ T9235] Cannot create hsr debugfs directory [ 376.564470][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 376.609765][ T25] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 376.645134][ T25] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 376.692043][ T25] usb 1-1: Product: syz [ 376.710632][ T25] usb 1-1: Manufacturer: syz [ 376.715386][ T25] usb 1-1: SerialNumber: syz [ 376.763107][ T25] usb 1-1: config 0 descriptor?? [ 376.835923][ T9310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 377.111101][ T5277] usb 1-1: USB disconnect, device number 30 [ 377.229126][ T2914] IPVS: stop unused estimator thread 0... [ 377.509350][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.613752][ T9333] IPVS: length: 8 != 992756864 [ 377.781502][ T939] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 377.886050][ T9235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.914568][ T9235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.930235][ T9235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.944658][ T9235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.977597][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 377.999740][ T939] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 378.023980][ T939] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 378.034625][ T939] usb 1-1: Product: syz [ 378.038927][ T939] usb 1-1: Manufacturer: syz [ 378.043800][ T939] usb 1-1: SerialNumber: syz [ 378.053307][ T939] usb 1-1: config 0 descriptor?? [ 378.060033][ T9310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.128414][ T9130] veth0_vlan: entered promiscuous mode [ 378.172098][ T9130] veth1_vlan: entered promiscuous mode [ 378.260059][ T9130] veth0_macvtap: entered promiscuous mode [ 378.313458][ T9130] veth1_macvtap: entered promiscuous mode [ 378.343093][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.394080][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.404849][ T5243] Bluetooth: hci6: command tx timeout [ 378.425923][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.436028][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.454580][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.468219][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.479138][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.501785][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.514471][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.532812][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.549255][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.562461][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.574836][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.580836][ T9337] block nbd1: shutting down sockets [ 378.603640][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.615909][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.628041][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.638941][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.650879][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.661567][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.672017][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.683689][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.694807][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.705791][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.719813][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.748760][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.756099][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.781426][ T9130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.798065][ T9130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.808160][ T9130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.817000][ T9130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.922623][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.934457][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.941765][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.187990][ T2542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.227534][ T2542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.276569][ T9130] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 379.286508][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.296122][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.296273][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.309143][ T9130] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 379.328907][ T5279] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 379.337216][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.423335][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.435710][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.520827][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 379.549088][ T5279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 379.589396][ T5279] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 379.620626][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 379.640927][ T5279] usb 4-1: Product: syz [ 379.645159][ T5279] usb 4-1: Manufacturer: syz [ 379.662990][ T5279] usb 4-1: SerialNumber: syz [ 379.674852][ T5279] usb 4-1: config 0 descriptor?? [ 379.704234][ T9359] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.705564][ T8] usb 1-1: USB disconnect, device number 31 [ 379.746313][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.759924][ T5279] chaoskey 4-1:0.0: Unable to register with hwrng [ 379.964607][ T9235] veth0_vlan: entered promiscuous mode [ 380.011319][ T5279] usb 4-1: USB disconnect, device number 32 [ 380.031636][ T9235] veth1_vlan: entered promiscuous mode [ 380.163420][ T9235] veth0_macvtap: entered promiscuous mode [ 380.196304][ T9235] veth1_macvtap: entered promiscuous mode [ 380.238750][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.266468][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.289449][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.317840][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.350452][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.368479][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.379440][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.392115][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.403738][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.416491][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.427188][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.445957][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.459782][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.507790][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.530013][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.541368][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.560822][ T5279] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 380.562777][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.588301][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.606244][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.616290][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.630755][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.649477][ T29] audit: type=1400 audit(1722065616.279:1959): avc: denied { setattr } for pid=9390 comm="syz.0.1447" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 380.650403][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.671490][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.690874][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.701207][ T9235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.713768][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.725429][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.749840][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 380.769612][ T9235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.779007][ T9235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.790177][ T9235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.802681][ T9235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.814510][ T5279] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 380.830624][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 380.844676][ T5279] usb 4-1: Product: syz [ 380.849686][ T5279] usb 4-1: Manufacturer: syz [ 380.860975][ T5279] usb 4-1: SerialNumber: syz [ 380.875119][ T5279] usb 4-1: config 0 descriptor?? [ 380.889417][ T9359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.910517][ T9379] block nbd4: shutting down sockets [ 381.126292][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.152128][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.202636][ T9235] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 381.214061][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.224604][ T9235] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 381.235611][ T9235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.276323][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.286804][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.504950][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.524838][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.640546][ T29] audit: type=1400 audit(1722065618.269:1960): avc: denied { bind } for pid=9421 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.705096][ T29] audit: type=1400 audit(1722065618.269:1961): avc: denied { setopt } for pid=9421 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.905916][ T9] usb 4-1: USB disconnect, device number 33 [ 383.016522][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1465'. [ 383.128312][ T29] audit: type=1326 audit(1722065618.759:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.4.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7472177299 code=0x0 [ 383.151767][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.178907][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 384.689980][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.711660][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.725908][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.758119][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.774836][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 384.784573][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.916852][ T35] bridge_slave_1: left allmulticast mode [ 384.926735][ T35] bridge_slave_1: left promiscuous mode [ 384.943098][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.972682][ T35] bridge_slave_0: left allmulticast mode [ 384.989038][ T35] bridge_slave_0: left promiscuous mode [ 384.998794][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.159309][ T5279] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 385.392304][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 385.411105][ T5279] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.433333][ T5279] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.469364][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.491818][ T5279] usb 2-1: Product: syz [ 385.502439][ T5279] usb 2-1: Manufacturer: syz [ 385.521101][ T5279] usb 2-1: SerialNumber: syz [ 385.543533][ T5279] usb 2-1: config 0 descriptor?? [ 385.561319][ T9463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.806057][ T5279] usb 2-1: USB disconnect, device number 30 [ 386.254980][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.282665][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.305293][ T35] bond0 (unregistering): Released all slaves [ 386.420775][ T5279] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 386.647996][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 386.687117][ T5279] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 386.710487][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 386.718722][ T5279] usb 2-1: Product: syz [ 386.740523][ T5279] usb 2-1: Manufacturer: syz [ 386.745182][ T5279] usb 2-1: SerialNumber: syz [ 386.777519][ T5279] usb 2-1: config 0 descriptor?? [ 386.817061][ T9463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.900510][ T5229] Bluetooth: hci1: command tx timeout [ 387.235545][ T35] hsr_slave_0: left promiscuous mode [ 387.246157][ T35] hsr_slave_1: left promiscuous mode [ 387.255817][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.265907][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.275697][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.284410][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.458261][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.488332][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.565497][ T35] veth1_macvtap: left promiscuous mode [ 387.580622][ T35] veth0_macvtap: left promiscuous mode [ 387.592105][ T35] veth1_vlan: left promiscuous mode [ 387.705494][ T35] veth0_vlan: left promiscuous mode [ 388.595912][ T5283] usb 2-1: USB disconnect, device number 31 [ 388.916665][ T29] audit: type=1400 audit(1722065624.539:1963): avc: denied { map } for pid=9505 comm="syz.1.1490" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 388.974963][ T5229] Bluetooth: hci1: command tx timeout [ 389.018171][ T29] audit: type=1400 audit(1722065624.539:1964): avc: denied { execute } for pid=9505 comm="syz.1.1490" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 389.802514][ T35] team0 (unregistering): Port device team_slave_1 removed [ 389.863499][ T35] team0 (unregistering): Port device team_slave_0 removed [ 391.041759][ T5229] Bluetooth: hci1: command tx timeout [ 391.065579][ T9458] chnl_net:caif_netlink_parms(): no params data found [ 391.100838][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 391.331811][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 391.345602][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.363972][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.382241][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.453283][ T8] usb 1-1: Product: syz [ 391.480782][ T8] usb 1-1: Manufacturer: syz [ 391.485659][ T8] usb 1-1: SerialNumber: syz [ 391.595395][ T8] usb 1-1: config 0 descriptor?? [ 391.603991][ T9520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.941191][ T5279] usb 1-1: USB disconnect, device number 32 [ 392.481012][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.513815][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.537226][ T9458] bridge_slave_0: entered allmulticast mode [ 392.563346][ T9458] bridge_slave_0: entered promiscuous mode [ 392.617607][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.642896][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.666811][ T9458] bridge_slave_1: entered allmulticast mode [ 392.676323][ T9458] bridge_slave_1: entered promiscuous mode [ 392.758346][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.775313][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.785810][ T9551] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1508'. [ 392.929957][ T9458] team0: Port device team_slave_0 added [ 392.949433][ T9458] team0: Port device team_slave_1 added [ 393.001153][ T5279] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 393.134906][ T29] audit: type=1400 audit(1722065628.769:1965): avc: denied { accept } for pid=9534 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 393.163172][ T5229] Bluetooth: hci1: command tx timeout [ 393.225576][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 393.261299][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.279943][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.340436][ T5279] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.380519][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.491034][ T5279] usb 1-1: Product: syz [ 393.496992][ T5279] usb 1-1: Manufacturer: syz [ 393.504169][ T5279] usb 1-1: SerialNumber: syz [ 393.893085][ T5279] usb 1-1: config 0 descriptor?? [ 393.910142][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.997252][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.031115][ T5279] usb 1-1: can't set config #0, error -71 [ 394.042519][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.091420][ T5279] usb 1-1: USB disconnect, device number 33 [ 394.118228][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.344080][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.538435][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.620692][ T9458] hsr_slave_0: entered promiscuous mode [ 394.637199][ T9458] hsr_slave_1: entered promiscuous mode [ 394.856357][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.896713][ T9582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1519'. [ 395.053923][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.080583][ T29] audit: type=1326 audit(1722065630.709:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.2.1522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9838577299 code=0x0 [ 395.389157][ T5316] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 395.408939][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1522'. [ 395.995553][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.020582][ T5316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.060502][ T5316] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 396.112021][ T5316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.159615][ T5316] usb 2-1: config 0 descriptor?? [ 396.636284][ T5316] usbhid 2-1:0.0: can't add hid device: -71 [ 396.638406][ T35] bridge_slave_1: left allmulticast mode [ 396.645026][ T5316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.667707][ T35] bridge_slave_1: left promiscuous mode [ 396.675966][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.697133][ T5316] usb 2-1: USB disconnect, device number 32 [ 396.706383][ T35] bridge_slave_0: left allmulticast mode [ 396.741582][ T35] bridge_slave_0: left promiscuous mode [ 396.748923][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.578203][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.599628][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.621603][ T35] bond0 (unregistering): Released all slaves [ 398.650800][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 398.661504][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 399.490755][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 399.626868][ T35] hsr_slave_0: left promiscuous mode [ 399.667750][ T35] hsr_slave_1: left promiscuous mode [ 400.575992][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.590731][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.598871][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.630606][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 400.639704][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.692038][ T9] usb 4-1: config 0 descriptor?? [ 400.702157][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.746458][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 400.752497][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.828603][ T35] veth1_macvtap: left promiscuous mode [ 400.838161][ T35] veth0_macvtap: left promiscuous mode [ 400.849180][ T35] veth1_vlan: left promiscuous mode [ 400.858571][ T35] veth0_vlan: left promiscuous mode [ 400.933563][ T9] pwc: send_video_command error -71 [ 400.950537][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 400.958200][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 400.983361][ T9] usb 4-1: USB disconnect, device number 34 [ 401.550977][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 401.821642][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.899017][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 401.915696][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.001449][ T9] usb 4-1: config 0 descriptor?? [ 402.325724][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 402.349983][ T9] pwc: send_video_command error -71 [ 402.355734][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 402.363857][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 402.379882][ T9] usb 4-1: USB disconnect, device number 35 [ 402.483989][ T35] team0 (unregistering): Port device team_slave_1 removed [ 402.609759][ T35] team0 (unregistering): Port device team_slave_0 removed [ 402.705471][ T29] audit: type=1400 audit(1722065638.339:1967): avc: denied { ioctl } for pid=9663 comm="syz.0.1551" path="socket:[25467]" dev="sockfs" ino=25467 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 403.588922][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 403.602331][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 404.068009][ T9458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.254347][ T9458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.276073][ T9458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.331967][ T9458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.435559][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 404.561037][ T46] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 404.778503][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.817053][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.841870][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.852358][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.872092][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 404.900106][ T46] usb 2-1: config 0 descriptor?? [ 404.916555][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 404.937663][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 405.031742][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.087116][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.094655][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.068998][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.076348][ T5228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.101449][ T29] audit: type=1326 audit(1722065640.749:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.194758][ T46] pwc: send_video_command error -71 [ 408.211606][ T29] audit: type=1326 audit(1722065640.749:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.221603][ T46] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 408.265767][ T46] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 408.281179][ T9709] batman_adv: batadv0: Interface deactivated: wlan1 [ 408.302853][ T46] usb 2-1: USB disconnect, device number 33 [ 408.319325][ T29] audit: type=1326 audit(1722065640.749:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.350762][ T29] audit: type=1326 audit(1722065640.749:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.417104][ T29] audit: type=1326 audit(1722065640.749:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.530886][ T29] audit: type=1326 audit(1722065640.749:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.611279][ T9709] batman_adv: batadv0: Removing interface: wlan1 [ 408.623915][ T29] audit: type=1326 audit(1722065640.749:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.713247][ T29] audit: type=1326 audit(1722065640.749:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.835539][ T29] audit: type=1326 audit(1722065640.759:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 408.892806][ T29] audit: type=1326 audit(1722065640.759:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437ff77299 code=0x7ffc0000 [ 409.146651][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.119402][ T9458] veth0_vlan: entered promiscuous mode [ 410.258328][ T9458] veth1_vlan: entered promiscuous mode [ 410.389736][ T9755] can0: slcan on ttyprintk. [ 410.428813][ T9458] veth0_macvtap: entered promiscuous mode [ 410.493174][ T9458] veth1_macvtap: entered promiscuous mode [ 410.549560][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.442373][ T9759] audit_log_start: 59 callbacks suppressed [ 471.442398][ T9759] audit: audit_backlog=65 > audit_backlog_limit=64 [ 471.455159][ T9759] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 471.463368][ T9759] audit: backlog limit exceeded [ 515.560379][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 515.567406][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9755/1:b..l P9758/1:b..l [ 515.577193][ C1] rcu: (detected by 1, t=10502 jiffies, g=45549, q=663 ncpus=2) [ 515.584990][ C1] task:syz.0.1582 state:R running task stack:27552 pid:9758 tgid:9754 ppid:5236 flags:0x00004000 [ 515.598547][ C1] Call Trace: [ 515.601848][ C1] [ 515.604795][ C1] __schedule+0xe37/0x5490 [ 515.609238][ C1] ? mark_lock+0xb5/0xc60 [ 515.613589][ C1] ? __pfx_mark_lock+0x10/0x10 [ 515.618379][ C1] ? __pfx_mark_lock+0x10/0x10 [ 515.623162][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 515.629335][ C1] ? __pfx___schedule+0x10/0x10 [ 515.634209][ C1] ? mark_held_locks+0x9f/0xe0 [ 515.638988][ C1] preempt_schedule_irq+0x51/0x90 [ 515.644034][ C1] irqentry_exit+0x36/0x90 [ 515.648470][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.654496][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 515.659844][ C1] Code: c1 05 3a 13 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 515.679488][ C1] RSP: 0018:ffffc9000335f818 EFLAGS: 00000206 [ 515.685666][ C1] RAX: dffffc0000000000 RBX: 1ffff9200066bf05 RCX: 0000000000000001 [ 515.693651][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08c00 [ 515.701644][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c4cd8 [ 515.709632][ C1] R10: ffffffff946266c7 R11: 0000000000000000 R12: 0000000000000000 [ 515.717615][ C1] R13: 0000000000000000 R14: ffffffff8ddb5220 R15: 0000000000000000 [ 515.725604][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 515.730660][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 515.735702][ C1] ? find_held_lock+0x2d/0x110 [ 515.740491][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 515.745538][ C1] __pte_offset_map+0x48/0x540 [ 515.750320][ C1] ? __pte_offset_map+0x42/0x540 [ 515.755277][ C1] __pte_offset_map_lock+0x8e/0x300 [ 515.760493][ C1] ? __pfx_lock_release+0x10/0x10 [ 515.765534][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 515.771359][ C1] ? mt_find+0x4cc/0xa20 [ 515.775626][ C1] follow_page_pte+0xde/0x1cf0 [ 515.780410][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 515.785717][ C1] follow_page_mask+0x3a1/0x21d0 [ 515.790675][ C1] ? check_vma_flags+0x36c/0x5a0 [ 515.795636][ C1] __get_user_pages+0x32d/0x15c0 [ 515.800593][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 515.805991][ C1] populate_vma_page_range+0x27f/0x3a0 [ 515.811478][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 515.817489][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 515.823319][ C1] ? vm_mmap_pgoff+0x25b/0x360 [ 515.828105][ C1] __mm_populate+0x1d6/0x380 [ 515.832717][ C1] ? __pfx___mm_populate+0x10/0x10 [ 515.837851][ C1] ? up_write+0x1b2/0x520 [ 515.842198][ C1] vm_mmap_pgoff+0x293/0x360 [ 515.846893][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 515.852027][ C1] ksys_mmap_pgoff+0x332/0x5d0 [ 515.856810][ C1] __x64_sys_mmap+0x125/0x190 [ 515.861503][ C1] do_syscall_64+0xcd/0x250 [ 515.866118][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.872028][ C1] RIP: 0033:0x7fe4569772d3 [ 515.877358][ C1] RSP: 002b:00007fe4576dbfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 515.885814][ C1] RAX: ffffffffffffffda RBX: 00007fe456b06058 RCX: 00007fe4569772d3 [ 515.893806][ C1] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000000000000 [ 515.901790][ C1] RBP: 0000000020000080 R08: 0000000000000008 R09: 0000000010000000 [ 515.909781][ C1] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000008 [ 515.917765][ C1] R13: 0000000020000100 R14: 00000000000024f5 R15: 0000000020000000 [ 515.925755][ C1] [ 515.928786][ C1] task:syz.0.1582 state:R running task stack:25888 pid:9755 tgid:9754 ppid:5236 flags:0x00004002 [ 515.940573][ C1] Call Trace: [ 515.943872][ C1] [ 515.946818][ C1] __schedule+0xe37/0x5490 [ 515.951264][ C1] ? __pfx___schedule+0x10/0x10 [ 515.956143][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 515.961533][ C1] preempt_schedule_common+0x44/0xc0 [ 515.966947][ C1] preempt_schedule_thunk+0x1a/0x30 [ 515.972162][ C1] _raw_spin_unlock+0x3e/0x50 [ 515.976859][ C1] do_wp_page+0x15fd/0x3430 [ 515.981383][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 515.986420][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 515.991444][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.996871][ C1] __handle_mm_fault+0x2468/0x5660 [ 516.002021][ C1] ? __pfx_mt_find+0x10/0x10 [ 516.006629][ C1] ? find_held_lock+0x2d/0x110 [ 516.011418][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 516.016923][ C1] ? find_vma+0xc0/0x140 [ 516.021218][ C1] ? __pfx_find_vma+0x10/0x10 [ 516.025928][ C1] handle_mm_fault+0x44e/0x7b0 [ 516.030712][ C1] ? __pkru_allows_pkey+0x52/0xb0 [ 516.035764][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 516.040901][ C1] exc_page_fault+0x5c/0xc0 [ 516.045440][ C1] asm_exc_page_fault+0x26/0x30 [ 516.050323][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 516.056153][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 516.075879][ C1] RSP: 0018:ffffc9000330f958 EFLAGS: 00050206 [ 516.081974][ C1] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 516.089955][ C1] RDX: 0000000000000000 RSI: ffff88801322f180 RDI: 000000002018f000 [ 516.097937][ C1] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed1002645fff [ 516.105927][ C1] R10: ffff88801322ffff R11: 0000000000000000 R12: 000000000018eb80 [ 516.113916][ C1] R13: ffffc9000330fd50 R14: ffff88801322f000 R15: 000000002018ee80 [ 516.121920][ C1] _copy_to_iter+0x4d2/0x1150 [ 516.126624][ C1] ? __pfx__copy_to_iter+0x10/0x10 [ 516.131753][ C1] ? __up_read+0x1fb/0x760 [ 516.136195][ C1] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 516.142021][ C1] ? down_read+0xc9/0x330 [ 516.146365][ C1] ? __pfx___up_read+0x10/0x10 [ 516.151144][ C1] copy_page_to_iter+0xf1/0x180 [ 516.156013][ C1] process_vm_rw_core.constprop.0+0x5c9/0xa10 [ 516.162106][ C1] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 516.168715][ C1] ? copy_iovec_from_user+0x77/0x170 [ 516.174046][ C1] process_vm_rw+0x301/0x360 [ 516.178698][ C1] ? __pfx_process_vm_rw+0x10/0x10 [ 516.183872][ C1] ? xfd_validate_state+0x5d/0x180 [ 516.189014][ C1] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 516.194674][ C1] ? do_syscall_64+0x91/0x250 [ 516.199377][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.204603][ C1] do_syscall_64+0xcd/0x250 [ 516.209130][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.215046][ C1] RIP: 0033:0x7fe456977299 [ 516.219472][ C1] RSP: 002b:00007fe4576fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 516.228077][ C1] RAX: ffffffffffffffda RBX: 00007fe456b05f80 RCX: 00007fe456977299 [ 516.236063][ C1] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000377 [ 516.244060][ C1] RBP: 00007fe4569e48e6 R08: 0000000000000286 R09: 0000000000000000 [ 516.252160][ C1] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 516.260147][ C1] R13: 000000000000000b R14: 00007fe456b05f80 R15: 00007ffff76fd178 [ 516.268136][ C1] [ 516.271173][ C1] rcu: rcu_preempt kthread starved for 10573 jiffies! g45549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 516.282381][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.292461][ C1] rcu: RCU grace-period kthread stack dump: [ 516.298436][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 516.310201][ C1] Call Trace: [ 516.313488][ C1] [ 516.316431][ C1] __schedule+0xe37/0x5490 [ 516.320886][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 516.326107][ C1] ? __pfx___schedule+0x10/0x10 [ 516.331064][ C1] ? schedule+0x298/0x350 [ 516.335515][ C1] ? __pfx_lock_release+0x10/0x10 [ 516.340575][ C1] ? __pfx___mod_timer+0x10/0x10 [ 516.345545][ C1] ? lock_acquire+0x1b1/0x560 [ 516.350245][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 516.355815][ C1] schedule+0xe7/0x350 [ 516.359913][ C1] schedule_timeout+0x136/0x2a0 [ 516.364784][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 516.370181][ C1] ? __pfx_process_timeout+0x10/0x10 [ 516.375485][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 516.381315][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 516.386801][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 516.391618][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 516.396915][ C1] ? rcu_gp_init+0xc82/0x1630 [ 516.401606][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 516.406828][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 516.412657][ C1] rcu_gp_kthread+0x271/0x380 [ 516.417352][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.422566][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.427791][ C1] ? __kthread_parkme+0x148/0x220 [ 516.432840][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.438056][ C1] kthread+0x2c1/0x3a0 [ 516.442143][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.447360][ C1] ? __pfx_kthread+0x10/0x10 [ 516.451972][ C1] ret_from_fork+0x45/0x80 [ 516.456413][ C1] ? __pfx_kthread+0x10/0x10 [ 516.461016][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.465980][ C1] [ 516.469010][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 516.475348][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 516.485339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 516.495420][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 516.500725][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 48 69 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d b8 82 aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 516.520349][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 516.526495][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b115519 [ 516.534479][ C1] RDX: 0000000000000001 RSI: ffff88801aa8b000 RDI: ffff88801aa8b064 [ 516.542460][ C1] RBP: ffff88801aa8b064 R08: 0000000000000001 R09: ffffed1017266fe1 [ 516.550441][ C1] R10: ffff8880b9337f0b R11: 0000000000000000 R12: ffff88801c73a800 [ 516.558422][ C1] R13: ffffffff8e94fdc0 R14: 0000000000000001 R15: 0000000000000000 [ 516.566402][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 516.575348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.581947][ C1] CR2: 0000001b317faff8 CR3: 000000006aee6000 CR4: 00000000003506f0 [ 516.589932][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.597925][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.605922][ C1] Call Trace: [ 516.609217][ C1] [ 516.612072][ C1] ? show_regs+0x8c/0xa0 [ 516.616344][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 516.622689][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 516.627918][ C1] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 516.633400][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 516.639063][ C1] ? tmigr_requires_handle_remote+0x14c/0x480 [ 516.645589][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 516.652027][ C1] ? hrtimer_run_queues+0x97/0x450 [ 516.657165][ C1] ? update_process_times+0x175/0x220 [ 516.662562][ C1] ? __pfx_update_process_times+0x10/0x10 [ 516.668383][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 516.673868][ C1] ? update_wall_time+0x1c/0x40 [ 516.678760][ C1] ? tick_nohz_handler+0x376/0x530 [ 516.683901][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 516.689391][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 516.694794][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 516.700539][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 516.706631][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 516.711768][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 516.717943][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 516.723777][ C1] [ 516.726719][ C1] [ 516.729659][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.735835][ C1] ? ct_kernel_exit+0x139/0x190 [ 516.740714][ C1] ? acpi_safe_halt+0x1a/0x20 [ 516.745409][ C1] acpi_idle_enter+0xc5/0x160 [ 516.750103][ C1] cpuidle_enter_state+0x85/0x500 [ 516.755142][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 516.760971][ C1] cpuidle_enter+0x4e/0xa0 [ 516.765399][ C1] do_idle+0x313/0x3f0 [ 516.769493][ C1] ? __pfx_do_idle+0x10/0x10 [ 516.774099][ C1] cpu_startup_entry+0x4f/0x60 [ 516.778887][ C1] start_secondary+0x220/0x2b0 [ 516.783670][ C1] ? __pfx_start_secondary+0x10/0x10 [ 516.788982][ C1] common_startup_64+0x13e/0x148 [ 516.793936][ C1]