last executing test programs: 3m1.257123779s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 2m32.381314755s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 1m55.094760608s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 1m15.004922735s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 59.113341611s ago: executing program 2 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x7fe2}, 0x48) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000280), 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 57.558989534s ago: executing program 2 (id=1996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 57.25006637s ago: executing program 2 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) 53.60641468s ago: executing program 2 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x5) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 40.683841961s ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 5.658472596s ago: executing program 4 (id=2123): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="150000006501000000000000000baf6463ff097bffff0700"], 0x15) dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r2}, 0x10) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/fs/fuse', 0x20000, 0x150) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) 4.510275226s ago: executing program 4 (id=2125): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x38156023ebcd7958}) 4.231531187s ago: executing program 0 (id=2126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) sync_file_range(r0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r1, 0x0, 0x2) 4.032009516s ago: executing program 0 (id=2127): syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = userfaultfd(0x801) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0xffff0000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000380)={0x1, 0x1, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000480)=[{0x28, 0x0, 0x0, 0xab49}, {0x6}]}, 0x8) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84}], 0x10}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.989308383s ago: executing program 4 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) 3.69703938s ago: executing program 4 (id=2129): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000001e00)=""/4108, 0x100c) sendmsg$alg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001140)="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"/267, 0x10b}, {&(0x7f0000000180)="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", 0xf01}], 0x2}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 3.696205082s ago: executing program 2 (id=2029): socket$inet(0x2, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000074020440fd07010099090000000109021b000100000000050b"], 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40440c1}, 0x2000c810) 3.022904909s ago: executing program 1 (id=2132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000020000000018110000", @ANYBLOB="f331b3986fa50e15ed246f6787382134a7c05d39b4c72de96b020d07b071dca44c26b6d40dd2e45aa840e19dba77092a89", @ANYBLOB="00060000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000400000000000085000000e8010900009500000000040000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) memfd_create(0x0, 0x3) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 2.675512664s ago: executing program 1 (id=2133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.618682822s ago: executing program 0 (id=2134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.312049431s ago: executing program 0 (id=2135): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xef2ddb4bb7193d8b}}, 0x1c}}, 0x0) 2.046461294s ago: executing program 0 (id=2136): pipe2$9p(&(0x7f0000000000), 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000009c0)={0x0}) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 1.969439659s ago: executing program 1 (id=2137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') read$FUSE(r1, 0x0, 0x2) 1.677219972s ago: executing program 1 (id=2138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.38471325s ago: executing program 1 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) 1.19021172s ago: executing program 4 (id=2140): syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x401) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000002400)={0x400, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()[&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e44}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '&@,${%-:Y})@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']&}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "42dc872e0ee4d16c6cb03f60087c1eaf2ecd640e4a5a2f31d14e82318edd562dd8bf8f315e61e6742549af5359d231675655820dd8adac1bb7f9cfa9644bfabc98811bff76eda6aac761afe9634e464294d3fca71fdc89d452af6b13491a4aadd1982df3ec45a6c11dab93d3ce0bb5c26b64cddaf6d654703d054dd7f1945234927f21c58f0b69eadca85f110e9bf3b6354d1efb25e3c4721a90ef65451a56e701205b5eaf3c637ebc25141ac646066af357ac0a44e24330c2990018819c5d478b7324a0105279"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffb6ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "793c357ac7f3d7ed7cdfbc2670d220485d3f18abcfd4c2dab767290229dfb606cadbaba951e194cb21c675bf7bbebf422d35bd5464ef343acd35c1a91d9df31507cfb49c6ec8ea1023f076b808c23e9f886e3d74e20caba09e08e10414755fda0d3b99cafb4c063aec4ee98f8ea4881b31cf932e3601f06c7b79f53009863be00d36d5d4e3741c753283d5cbf3532db3aba3dd7ff2822842f9ef8c935bb40249fb0f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x400}, 0x1, 0x0, 0x0, 0x20000000}, 0x94b20d40506b8d7) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) 1.076085005s ago: executing program 1 (id=2141): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fef5251d8a250e33413d038fb4"}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r13, 0x0, 0x488, &(0x7f00000000c0)={{0x29, @rand_addr=0x64010101, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x3f, 0x70}, {@local, 0x4e21, 0x0, 0x6, 0xfffffcb9, 0x5d09}}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r1], 0x0) 92.04551ms ago: executing program 3 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getuid() 86.292483ms ago: executing program 2 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') close_range(r0, 0xffffffffffffffff, 0x2) pread64(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) fstatfs(r1, &(0x7f0000000380)=""/31) r2 = openat$cgroup_procs(r1, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) fallocate(r2, 0x3, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001f00)="fb7dd7a2a84cf369100607e9c24d738b5e152bfe9b0607d42b7ce1d21a9fa281bc1f5984a4a4149f55a90fa281b36d6ccb6e49f2b6b07d509d8a94af7c4359e9900235eaffdf73a6b2464b94fdc6300be0f695e721225d1c67b9417417891956ce82e0d579575b72b8ad9ee243f2482c4993acb92f298e7fe4a42f06", 0x7c}, {&(0x7f0000000400)="e1eb2f4cad90f670289c7028643a2ec3861a0ea7b4910c4abef15c0114457fceca9f66743477bc3ad695761b403b5051797fa7e27dbffd36c6069cb6698ac3563a2ecb841dabbf6c413a20569057375ea09e75594ede0954660829500c1d65d5ec4018e8433aeb", 0x67}, {&(0x7f0000001ac0)="807a9a22088c5d8949ac82eb1d8cd334eb501c19d5d784268260b352dff63f02d880dfb2b6051404f0450694ae029ec9f1e10729d8c6c59fc6294e7906bc9fe423ef8016d291e4162bc4255892567e06bb9e1c5076938467fdc682ac566eeced6545b7000b5d638bbfe9cda45e294cb678c82f09a1808ebabb46444e1bb41c4439512592cd834613", 0x88}, {&(0x7f0000001b80)="b6c2f14b538108a4764c35d0041911b23a24abd639d5effe59bf236ea16cf18a9367c4bcdf11c386f6561545908213bd9b309e807a734d30d80876a946fee28c9b3d49b0e226e61b9a75aa390aa001068e0532353d37926b4faa613d913a7ff65b1e5bbfbebffe475f20a3211908c9491f58c125d95c021651d4c235e53963f6134c914b9d80905e0c70d770b55e6c3b8ae418a87001a05d70b10be4a212ef55860496dc3192c333848cca81e95e7938a0d4fd", 0xb3}, {&(0x7f0000001c40)="439c426f7642e317c2a7cee63df3a131a61015c7cb2d2cbed360d8d53ebfd132b3deeca26b974cab17fc8fe6f9246cd6cbac7e75994af4fbb3e065f50b89f23182c3a5bb25b7f4cefb68d83717559dad7adbfb3ce115d32aaa8cc89891bdcc1ab7b0da92680eacdc5874", 0x6a}, {&(0x7f0000001d40)="4e2226c2b9c0ccaf5dea571898db2b39c0aa1e44266b2a20c6ec39b0262f9a14f246d0fc87221b6ae22d69f642ac5742f43a06c2edaf9e6558c3145c8585aa6111529f43216809457fffbbefbd97b3e8b9fff2beb0f5ef13965659353e9ff44b8d8baef07c6e99b02981dbbbf2840a474d93c4a5c26d1ee350b7d149edf4342c7394b21e58584deae682c4a6a02094736c5130652be5e908515082b5775c3fbf7c99c9bdbad318eda4e8947603284179425f02", 0xb3}, {&(0x7f0000000180)="0c5abbbf3ec250d6d487f682137045ab5d23bc0b9c07", 0x16}], 0x8, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010100}}}], 0x98}, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000e3ff940000000000000024df45"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socket$nl_route(0x10, 0x3, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365722efa"], 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 78.848059ms ago: executing program 0 (id=2143): r0 = socket$inet6(0xa, 0x0, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2}, {0x0, 0xd}}}, 0x24}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000800)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f00000030c0)=[{{&(0x7f0000000740)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='cgroup\x00', 0x20840, &(0x7f0000000340)=':\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=2144): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') write$yama_ptrace_scope(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): "syz.4.1605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x0 [ 783.442473][T10094] Bluetooth: hci1: command tx timeout [ 785.373311][T11731] warning: `syz.4.1605' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 785.532860][T10094] Bluetooth: hci1: command 0x0405 tx timeout [ 786.127808][ T29] audit: type=1326 audit(1719478955.798:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.0.1614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad75ae9 code=0x0 [ 787.179902][T11648] chnl_net:caif_netlink_parms(): no params data found [ 787.868971][T11784] Can't find a SQUASHFS superblock on nullb0 [ 787.946914][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 788.093382][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.100976][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.108577][T11648] bridge_slave_0: entered allmulticast mode [ 788.119764][T11648] bridge_slave_0: entered promiscuous mode [ 788.136809][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.144441][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.151862][T11648] bridge_slave_1: entered allmulticast mode [ 788.166262][T11648] bridge_slave_1: entered promiscuous mode [ 788.261633][ T29] audit: type=1326 audit(1719478958.008:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 788.295258][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.344163][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.352580][ T29] audit: type=1326 audit(1719478958.008:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 788.530960][ T29] audit: type=1326 audit(1719478958.038:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.125357][T11780] ALSA: mixer_oss: invalid OSS volume '' [ 789.168967][ T29] audit: type=1326 audit(1719478958.038:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.323260][ T29] audit: type=1326 audit(1719478958.038:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.443469][ T29] audit: type=1326 audit(1719478958.058:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.486909][T11648] team0: Port device team_slave_0 added [ 789.510932][T11648] team0: Port device team_slave_1 added [ 789.551808][ T29] audit: type=1326 audit(1719478958.058:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.669974][ T29] audit: type=1326 audit(1719478958.058:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.772055][T11648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.791986][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.835587][ T29] audit: type=1326 audit(1719478958.058:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.875896][ T29] audit: type=1326 audit(1719478958.058:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11793 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 789.902433][T11648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.932619][T11648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.951958][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.993642][T11648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.217238][T11648] hsr_slave_0: entered promiscuous mode [ 790.253040][T11648] hsr_slave_1: entered promiscuous mode [ 790.285821][T11648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.319417][T11648] Cannot create hsr debugfs directory [ 790.569757][T11809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 790.843265][T11814] netlink: 'syz.4.1627': attribute type 10 has an invalid length. [ 790.878920][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1629'. [ 790.977700][T11814] team0: Device ipvlan1 failed to register rx_handler [ 794.224473][T11827] ALSA: mixer_oss: invalid OSS volume '' [ 794.309245][T11648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 794.395334][T11648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 794.447337][T11648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 794.499458][T11648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 794.709053][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 794.709078][ T29] audit: type=1326 audit(1719478964.458:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.1.1640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x0 [ 796.070563][T11862] UBIFS error (pid: 11862): cannot open "./file0", error -22 [ 796.077891][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.548922][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.596139][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.603388][ T7982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.647020][T11872] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1646'. [ 797.672122][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.679384][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.602153][T11648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.096402][T11648] veth0_vlan: entered promiscuous mode [ 799.216154][T11648] veth1_vlan: entered promiscuous mode [ 799.319625][ T29] audit: type=1400 audit(1719478969.068:1323): avc: denied { setopt } for pid=11892 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 799.460218][ T29] audit: type=1400 audit(1719478969.088:1324): avc: denied { ioctl } for pid=11892 comm="syz.1.1651" path="socket:[41736]" dev="sockfs" ino=41736 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 799.472473][T11648] veth0_macvtap: entered promiscuous mode [ 799.671434][T11648] veth1_macvtap: entered promiscuous mode [ 799.813723][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.872505][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.921869][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.952610][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.987187][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.029140][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.056006][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.099734][ T29] audit: type=1800 audit(1719478969.838:1325): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1655" name="bus" dev="sda1" ino=2027 res=0 errno=0 [ 800.133782][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.173994][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.222807][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.278503][T11648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.357565][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.415683][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.467488][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.515122][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.561493][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.621438][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.672667][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.707848][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.746289][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.812692][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.971974][T11648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.096321][T11648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.164765][T11648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.192436][T11648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.212434][T11648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.393640][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1657'. [ 801.873888][ T6431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.881771][ T6431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.719295][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.772414][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.133278][ T29] audit: type=1400 audit(1719478972.888:1326): avc: denied { connect } for pid=11935 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 803.210639][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 803.220415][ T29] audit: type=1400 audit(1719478972.958:1327): avc: denied { ioctl } for pid=11935 comm="syz.1.1663" path="socket:[43036]" dev="sockfs" ino=43036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 803.261117][T11937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1663'. [ 803.389066][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 803.572114][T11941] UBIFS error (pid: 11941): cannot open "./file0", error -22 [ 803.715717][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.035401][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.270646][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.370325][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.619472][ T11] bridge_slave_1: left allmulticast mode [ 804.625914][ T11] bridge_slave_1: left promiscuous mode [ 804.632268][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.645467][ T11] bridge_slave_0: left allmulticast mode [ 804.652364][ T11] bridge_slave_0: left promiscuous mode [ 804.658284][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.051598][T10094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.087700][T10094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.097810][T10094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.108597][T10094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.115876][T11967] kernel profiling enabled (shift: 8) [ 808.132986][T10094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 808.142788][T10094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.275787][T11977] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 808.312764][T11977] binder: 11976:11977 ioctl 4018620d 200001c0 returned -1 [ 808.576847][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'. [ 809.195176][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.303570][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.369495][ T11] bond0 (unregistering): Released all slaves [ 810.488526][ T5088] Bluetooth: hci1: command tx timeout [ 811.652419][ T11] hsr_slave_0: left promiscuous mode [ 811.670034][ T11] hsr_slave_1: left promiscuous mode [ 811.684211][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.691693][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.720943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.740942][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.874928][ T11] veth1_macvtap: left promiscuous mode [ 811.901503][ T11] veth0_macvtap: left promiscuous mode [ 811.918233][ T11] veth1_vlan: left promiscuous mode [ 811.936415][ T11] veth0_vlan: left promiscuous mode [ 812.562473][ T5088] Bluetooth: hci1: command tx timeout [ 813.870806][T12014] UBIFS error (pid: 12014): cannot open "./file0", error -22 [ 814.331646][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.347595][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.642587][ T5088] Bluetooth: hci1: command tx timeout [ 814.914206][ T11] team0 (unregistering): Port device team_slave_1 removed [ 815.041249][ T11] team0 (unregistering): Port device team_slave_0 removed [ 816.726285][ T5088] Bluetooth: hci1: command tx timeout [ 816.984511][ T29] audit: type=1800 audit(1719478986.738:1328): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1693" name="bus" dev="sda1" ino=2025 res=0 errno=0 [ 818.061956][T11972] chnl_net:caif_netlink_parms(): no params data found [ 818.585834][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.601058][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.610109][T11972] bridge_slave_0: entered allmulticast mode [ 818.628572][T11972] bridge_slave_0: entered promiscuous mode [ 818.681762][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.705579][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.739957][T11972] bridge_slave_1: entered allmulticast mode [ 818.812859][T11972] bridge_slave_1: entered promiscuous mode [ 818.951598][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.984072][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.122154][T11972] team0: Port device team_slave_0 added [ 819.151892][T11972] team0: Port device team_slave_1 added [ 819.282630][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.291796][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.319962][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.373755][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.402551][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.430731][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.107138][T11972] hsr_slave_0: entered promiscuous mode [ 820.129052][T11972] hsr_slave_1: entered promiscuous mode [ 820.157258][T11972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.171846][T11972] Cannot create hsr debugfs directory [ 820.226152][T12073] netlink: 'syz.1.1702': attribute type 2 has an invalid length. [ 820.272421][T12073] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 820.340093][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1702'. [ 820.376601][ T29] audit: type=1804 audit(1719478990.098:1329): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1702" name="/root/syzkaller.RuJQlX/112/file0" dev="sda1" ino=2003 res=1 errno=0 [ 820.566506][ T29] audit: type=1804 audit(1719478990.158:1330): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1702" name="/root/syzkaller.RuJQlX/112/file0" dev="sda1" ino=2003 res=1 errno=0 [ 822.646603][T11972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.701366][T11972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.752905][T11972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.819784][T12098] mkiss: ax0: crc mode is auto. [ 822.819891][T11972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.956380][ T29] audit: type=1400 audit(1719478992.708:1331): avc: denied { getopt } for pid=12102 comm="syz.2.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 823.042521][ T29] audit: type=1400 audit(1719478992.778:1332): avc: denied { ioctl } for pid=12102 comm="syz.2.1712" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 823.540121][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.653461][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.689504][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.696828][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.738085][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.745457][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.040759][T11972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.160365][ T29] audit: type=1800 audit(1719478994.848:1333): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1720" name="bus" dev="sda1" ino=2021 res=0 errno=0 [ 825.563574][T12141] mkiss: ax0: crc mode is auto. [ 825.627282][ T29] audit: type=1804 audit(1719478995.378:1334): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1722" name="/root/syzkaller.RuJQlX/117/cgroup.controllers" dev="sda1" ino=2025 res=1 errno=0 [ 825.931058][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.390879][T11972] veth0_vlan: entered promiscuous mode [ 827.841663][T11972] veth1_vlan: entered promiscuous mode [ 828.095741][T11972] veth0_macvtap: entered promiscuous mode [ 828.116453][T11972] veth1_macvtap: entered promiscuous mode [ 828.170311][T12176] mkiss: ax0: crc mode is auto. [ 828.222040][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.236375][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.255392][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.268798][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.283943][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.325388][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.371410][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.411801][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.447046][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.499837][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.566792][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.594293][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.619861][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.630255][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.671720][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.734814][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.797284][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.862667][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.941011][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.985482][T11972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.034814][T11972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.079026][ T29] audit: type=1804 audit(1719478998.828:1335): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1740" name="/root/syzkaller.a8N9tB/299/cgroup.controllers" dev="sda1" ino=2025 res=1 errno=0 [ 829.114425][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.220132][T11972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.250573][T11972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.263155][T11972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.286301][T11972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.705449][T12200] UBIFS error (pid: 12200): cannot open "./file0", error -22 [ 829.827984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.931784][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.913295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.953445][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.041604][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.189813][T10094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.203476][T10094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.215192][T10094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.224791][T10094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.232875][T10094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 833.240359][T10094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 833.466363][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.630804][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.770100][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.068950][T12239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.342509][ T29] audit: type=1326 audit(1719479004.078:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.4.1755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x0 [ 834.425507][T12243] overlayfs: failed to resolve './file1': -2 [ 834.703924][T12230] chnl_net:caif_netlink_parms(): no params data found [ 834.738520][ T62] bridge_slave_1: left allmulticast mode [ 834.748269][ T62] bridge_slave_1: left promiscuous mode [ 834.770895][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.854940][ T62] bridge_slave_0: left allmulticast mode [ 834.863439][ T62] bridge_slave_0: left promiscuous mode [ 834.890082][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.911032][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.933909][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 834.943903][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 834.970157][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 834.983806][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 834.992558][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 835.283304][T10094] Bluetooth: hci1: command tx timeout [ 837.003250][T12281] UBIFS error (pid: 12281): cannot open "./file0", error -22 [ 837.137450][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.189857][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.207790][ T62] bond0 (unregistering): Released all slaves [ 837.282639][T10094] Bluetooth: hci4: command tx timeout [ 837.318072][T12250] veth0_vlan: entered allmulticast mode [ 837.452876][T10094] Bluetooth: hci1: command tx timeout [ 837.490006][T12264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'. [ 838.232174][ T62] hsr_slave_0: left promiscuous mode [ 838.262811][ T62] hsr_slave_1: left promiscuous mode [ 838.283497][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.306379][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.316826][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.352316][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.470366][ T62] veth1_macvtap: left promiscuous mode [ 838.478352][ T62] veth0_macvtap: left promiscuous mode [ 838.490298][ T62] veth1_vlan: left promiscuous mode [ 838.502736][ T62] veth0_vlan: left promiscuous mode [ 838.884723][ T29] audit: type=1326 audit(1719479008.638:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x0 [ 838.966070][T12304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.236662][T12306] overlayfs: failed to resolve './file1': -2 [ 839.392695][T10094] Bluetooth: hci4: command tx timeout [ 839.533479][T10094] Bluetooth: hci1: command tx timeout [ 840.059052][ T29] audit: type=1804 audit(1719479009.808:1338): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1771" name="/root/syzkaller.RuJQlX/131/cgroup.controllers" dev="sda1" ino=2010 res=1 errno=0 [ 840.564752][ T62] team0 (unregistering): Port device team_slave_1 removed [ 840.714280][ T62] team0 (unregistering): Port device team_slave_0 removed [ 841.452490][T10094] Bluetooth: hci4: command tx timeout [ 841.548664][T10094] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 841.602851][T10094] Bluetooth: hci1: command tx timeout [ 842.633925][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.641183][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.655878][T12230] bridge_slave_0: entered allmulticast mode [ 842.674588][T12230] bridge_slave_0: entered promiscuous mode [ 842.711710][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.720089][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.727951][T12230] bridge_slave_1: entered allmulticast mode [ 842.758708][T12230] bridge_slave_1: entered promiscuous mode [ 842.878512][ T29] audit: type=1326 audit(1719479012.628:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.1780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x0 [ 842.942050][T12338] mkiss: ax0: crc mode is auto. [ 842.971092][T12230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.006730][T12345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.078619][T12230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.230258][T12345] overlayfs: failed to resolve './file1': -2 [ 843.317900][T12230] team0: Port device team_slave_0 added [ 843.359639][T12230] team0: Port device team_slave_1 added [ 843.522414][T10094] Bluetooth: hci4: command tx timeout [ 843.666751][T12230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.675422][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.701480][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.712069][T12230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.738840][T12230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.759963][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.785960][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.815860][T12230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.154145][T12230] hsr_slave_0: entered promiscuous mode [ 844.168850][T12230] hsr_slave_1: entered promiscuous mode [ 844.177832][T12230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.192661][T12230] Cannot create hsr debugfs directory [ 844.256373][T12254] chnl_net:caif_netlink_parms(): no params data found [ 844.412789][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.714974][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.847344][ T7982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 844.932224][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.110568][ T7982] usb 5-1: no configurations [ 845.140570][ T7982] usb 5-1: can't read configurations, error -22 [ 845.334182][ T7982] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 845.367409][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.573542][ T7982] usb 5-1: no configurations [ 845.587610][ T7982] usb 5-1: can't read configurations, error -22 [ 845.597632][ T7982] usb usb5-port1: attempt power cycle [ 845.809887][T12254] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.823795][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.831647][T12254] bridge_slave_0: entered allmulticast mode [ 845.849664][T12254] bridge_slave_0: entered promiscuous mode [ 845.878335][T12254] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.900864][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.918846][T12254] bridge_slave_1: entered allmulticast mode [ 845.944730][T12254] bridge_slave_1: entered promiscuous mode [ 846.022676][ T7982] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 846.084299][ T7982] usb 5-1: no configurations [ 846.088931][ T7982] usb 5-1: can't read configurations, error -22 [ 846.510988][ T7982] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 846.598993][ T7982] usb 5-1: no configurations [ 846.622783][ T7982] usb 5-1: can't read configurations, error -22 [ 846.660982][ T7982] usb usb5-port1: unable to enumerate USB device [ 846.795572][T12254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.994136][T12254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.304360][T12254] team0: Port device team_slave_0 added [ 847.323672][ T62] bridge_slave_1: left allmulticast mode [ 847.332114][ T62] bridge_slave_1: left promiscuous mode [ 847.348731][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.427366][ T62] bridge_slave_0: left allmulticast mode [ 847.458081][ T62] bridge_slave_0: left promiscuous mode [ 847.473046][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.828614][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.891225][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.924862][ T62] bond0 (unregistering): Released all slaves [ 849.443924][T12254] team0: Port device team_slave_1 added [ 850.236579][T12254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.269835][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.325464][T12254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.346574][T12254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.353735][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.381260][T12254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.224981][T12254] hsr_slave_0: entered promiscuous mode [ 851.250943][T12254] hsr_slave_1: entered promiscuous mode [ 851.262409][ T933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 851.263370][T12254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.298533][T12254] Cannot create hsr debugfs directory [ 851.360271][ T62] hsr_slave_0: left promiscuous mode [ 851.377549][ T62] hsr_slave_1: left promiscuous mode [ 851.392851][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.407994][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.431015][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.476657][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.491167][ T933] usb 2-1: no configurations [ 851.496360][ T933] usb 2-1: can't read configurations, error -22 [ 851.545217][ T62] veth1_vlan: left promiscuous mode [ 851.553720][ T62] veth0_vlan: left promiscuous mode [ 851.662343][ T933] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 851.873170][ T933] usb 2-1: no configurations [ 851.884482][ T933] usb 2-1: can't read configurations, error -22 [ 851.906005][ T933] usb usb2-port1: attempt power cycle [ 852.362630][ T933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 852.453166][ T933] usb 2-1: no configurations [ 852.457985][ T933] usb 2-1: can't read configurations, error -22 [ 852.642432][ T933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 852.718733][ T933] usb 2-1: no configurations [ 852.723447][ T933] usb 2-1: can't read configurations, error -22 [ 852.753000][ T933] usb usb2-port1: unable to enumerate USB device [ 853.285338][ T62] team0 (unregistering): Port device team_slave_1 removed [ 853.444153][ T62] team0 (unregistering): Port device team_slave_0 removed [ 855.397001][ T29] audit: type=1400 audit(1719479537.146:1340): avc: denied { map } for pid=12456 comm="syz.2.1813" path="socket:[45648]" dev="sockfs" ino=45648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 855.504423][ T29] audit: type=1400 audit(1719479537.256:1341): avc: denied { create } for pid=12456 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 855.596489][ T29] audit: type=1400 audit(1719479537.286:1342): avc: denied { setopt } for pid=12456 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 855.616090][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.997531][T12230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.151677][T12230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 856.214427][T12230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 857.160878][T12230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 857.415923][ T62] IPVS: stop unused estimator thread 0... [ 857.512679][ T5132] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 857.718090][ T5132] usb 2-1: no configurations [ 857.740475][ T5132] usb 2-1: can't read configurations, error -22 [ 857.819579][T12230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.930168][T12230] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.932678][ T5132] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 857.951041][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.958379][ T7982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.020734][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.028151][ T7982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.165200][ T5132] usb 2-1: no configurations [ 858.169870][ T5132] usb 2-1: can't read configurations, error -22 [ 858.202685][ T5132] usb usb2-port1: attempt power cycle [ 858.345166][T12254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 858.414836][T12254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 858.451403][T12254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 858.494542][T12254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 858.632544][ T5132] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 858.695294][ T5132] usb 2-1: no configurations [ 858.699962][ T5132] usb 2-1: can't read configurations, error -22 [ 859.001422][T12254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.172386][ T5132] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 859.332330][ T5132] usb 2-1: no configurations [ 859.358467][ T5132] usb 2-1: can't read configurations, error -22 [ 859.510870][ T5132] usb usb2-port1: unable to enumerate USB device [ 859.817273][T12230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.849533][T12254] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.924713][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.932042][T12486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.088448][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.095763][T12486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.457930][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 860.584952][T12486] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 860.722750][ T29] audit: type=1800 audit(1719479542.426:1343): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1822" name="file1" dev="sda1" ino=2023 res=0 errno=0 [ 861.735759][T12230] veth0_vlan: entered promiscuous mode [ 861.768346][T12486] usb 3-1: config index 0 descriptor too short (expected 59460, got 68) [ 861.797491][T12230] veth1_vlan: entered promiscuous mode [ 861.810628][T12486] usb 3-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 861.842264][T12486] usb 3-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 861.843092][ T29] audit: type=1326 audit(1719479543.586:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 861.862327][T12486] usb 3-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 861.900436][T12486] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.918848][T12486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 861.949810][ T29] audit: type=1326 audit(1719479543.586:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 861.973855][T12486] usb 3-1: SerialNumber: syz [ 861.999267][T12230] veth0_macvtap: entered promiscuous mode [ 862.016147][ T29] audit: type=1326 audit(1719479543.586:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.078344][T12230] veth1_macvtap: entered promiscuous mode [ 862.094377][ T29] audit: type=1326 audit(1719479543.636:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.142344][ T29] audit: type=1326 audit(1719479543.636:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.193092][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.213237][ T29] audit: type=1326 audit(1719479543.646:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.230135][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.239671][ T29] audit: type=1326 audit(1719479543.646:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.284226][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.314881][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.333450][ T29] audit: type=1326 audit(1719479543.646:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.351220][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.387721][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.407092][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.422069][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.476349][T12230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.516423][ T29] audit: type=1326 audit(1719479543.646:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12505 comm="syz.4.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe335975ae9 code=0x7ffc0000 [ 862.547424][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.632367][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.693100][T12486] usb 3-1: USB disconnect, device number 5 [ 862.704121][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.872510][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.111835][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.250627][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.293873][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.352627][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.394096][T12230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.448125][T12230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.491963][T12230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.520367][T12230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.550076][T12230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.759094][T12254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.693626][T12544] ubi0: attaching mtd0 [ 864.783676][T12544] ubi0: scanning is finished [ 864.827031][T12546] Bluetooth: MGMT ver 1.22 [ 864.853448][T12544] ubi0: empty MTD device detected [ 864.903579][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.975865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.133199][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.141084][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.160509][T12254] veth0_vlan: entered promiscuous mode [ 865.258668][T12254] veth1_vlan: entered promiscuous mode [ 865.267578][T12544] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 865.452158][T12254] veth0_macvtap: entered promiscuous mode [ 865.461611][T12561] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 865.497863][T12254] veth1_macvtap: entered promiscuous mode [ 865.589292][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.617878][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.656013][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.698130][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.731246][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.766007][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.783508][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.803606][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.824043][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.854719][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.960285][T12254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.021468][T12565] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 866.072831][T12565] team0: Device ipvlan1 failed to register rx_handler [ 866.119091][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 866.119117][ T29] audit: type=1326 audit(1719479547.866:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.170550][ T29] audit: type=1326 audit(1719479547.866:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.215511][ T29] audit: type=1326 audit(1719479547.896:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.352906][ T29] audit: type=1326 audit(1719479547.906:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.411974][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.465329][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.482283][ T29] audit: type=1326 audit(1719479547.906:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.507698][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.528550][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.540339][ T29] audit: type=1326 audit(1719479547.906:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.575691][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.575751][T12580] capability: warning: `syz.4.1840' uses deprecated v2 capabilities in a way that may be insecure [ 866.589779][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.616361][ T29] audit: type=1326 audit(1719479547.906:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.631724][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 866.652471][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.673043][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.695660][ T29] audit: type=1326 audit(1719479547.916:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.698694][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.730455][ T29] audit: type=1326 audit(1719479547.916:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.738754][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.761178][ T29] audit: type=1326 audit(1719479547.956:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12563 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7ffc0000 [ 866.819519][T12254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.901183][T12254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.939214][T12254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.954976][T12254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.990721][T12254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.000351][T12580] can: request_module (can-proto-5) failed. [ 868.786414][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.812747][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.911570][T12604] ubi0: attaching mtd0 [ 868.934922][T12604] ubi0: scanning is finished [ 868.970219][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 868.997952][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.040382][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.462409][T12604] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 869.478891][T12604] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 869.511339][T12604] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 869.548869][T12604] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 869.610235][T12604] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 869.644564][T12604] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 869.699558][T12604] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 539832792 [ 869.718880][ T6431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.732302][T12604] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 869.828127][T12611] ubi0: background thread "ubi_bgt0d" started, PID 12611 [ 870.044188][ T6431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.170704][ T6431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.259714][ T6431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.421390][ T6431] bridge_slave_1: left allmulticast mode [ 870.427577][ T6431] bridge_slave_1: left promiscuous mode [ 870.434204][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.454152][ T6431] bridge_slave_0: left allmulticast mode [ 870.459959][ T6431] bridge_slave_0: left promiscuous mode [ 870.466084][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.911836][T12623] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 871.462679][ T785] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 872.578986][ T785] usb 2-1: config index 0 descriptor too short (expected 59460, got 68) [ 872.612694][ T785] usb 2-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 872.629442][ T785] usb 2-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 872.655139][ T785] usb 2-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 872.673886][ T785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.683563][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 872.691600][ T785] usb 2-1: SerialNumber: syz [ 872.732774][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.758012][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.805457][ T6431] bond0 (unregistering): Released all slaves [ 872.848752][T12627] netlink: 'syz.0.1852': attribute type 10 has an invalid length. [ 872.878788][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.896121][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.908618][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.946001][T12627] team0: Device ipvlan1 failed to register rx_handler [ 872.966787][ T785] usb 2-1: USB disconnect, device number 13 [ 872.985329][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 873.002752][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 873.030358][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.334547][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 873.334566][ T29] audit: type=1400 audit(1719479555.086:1369): avc: denied { ioctl } for pid=12647 comm="syz.0.1862" path="socket:[47433]" dev="sockfs" ino=47433 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 873.564536][ T29] audit: type=1326 audit(1719479555.296:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 873.657344][T12650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 873.669346][ T29] audit: type=1326 audit(1719479555.326:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 873.761397][ T29] audit: type=1326 audit(1719479555.326:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 873.843399][ T29] audit: type=1326 audit(1719479555.326:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 873.869104][ T6431] hsr_slave_0: left promiscuous mode [ 873.895155][ T29] audit: type=1326 audit(1719479555.326:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 873.919023][ T6431] hsr_slave_1: left promiscuous mode [ 873.961674][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.986915][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.999617][ T29] audit: type=1326 audit(1719479555.326:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 874.033601][T12657] ubi: mtd0 is already attached to ubi0 [ 874.061350][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.083020][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.112433][ T29] audit: type=1326 audit(1719479555.326:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 874.187651][ T29] audit: type=1326 audit(1719479555.326:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 874.245286][ T6431] veth1_macvtap: left promiscuous mode [ 874.263294][ T6431] veth0_macvtap: left promiscuous mode [ 874.295762][ T6431] veth1_vlan: left promiscuous mode [ 874.301272][ T6431] veth0_vlan: left promiscuous mode [ 874.312573][ T29] audit: type=1326 audit(1719479555.326:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2270975ae9 code=0x7ffc0000 [ 875.127422][ T5088] Bluetooth: hci4: command tx timeout [ 875.779345][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.788596][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.112167][T12671] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 877.220889][ T5088] Bluetooth: hci4: command tx timeout [ 878.193405][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 878.347310][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 878.968564][T12689] gadgetfs: Unknown parameter 'acl' [ 879.294006][ T5088] Bluetooth: hci4: command tx timeout [ 880.403005][ T933] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 880.606440][ T933] usb 2-1: config index 0 descriptor too short (expected 59460, got 68) [ 880.634796][ T933] usb 2-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 880.635846][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 880.635868][ T29] audit: type=1326 audit(1719479562.376:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.0.1876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 880.693434][ T933] usb 2-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 880.742343][ T933] usb 2-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 880.781637][ T933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.812364][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 880.820500][ T933] usb 2-1: SerialNumber: syz [ 880.839227][T12640] chnl_net:caif_netlink_parms(): no params data found [ 881.081101][ T933] usb 2-1: USB disconnect, device number 14 [ 881.359724][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.367163][ T5088] Bluetooth: hci4: command tx timeout [ 881.373530][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.379278][T12701] can: request_module (can-proto-5) failed. [ 881.381047][T12640] bridge_slave_0: entered allmulticast mode [ 881.395860][T12640] bridge_slave_0: entered promiscuous mode [ 881.411116][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.431014][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.456300][T12640] bridge_slave_1: entered allmulticast mode [ 881.471594][T12640] bridge_slave_1: entered promiscuous mode [ 881.638131][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.677428][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.876623][T12640] team0: Port device team_slave_0 added [ 881.916173][T12640] team0: Port device team_slave_1 added [ 882.010307][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.029664][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.072026][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.088281][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.097771][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.214555][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.592021][T12640] hsr_slave_0: entered promiscuous mode [ 883.686455][T12640] hsr_slave_1: entered promiscuous mode [ 884.915853][T10094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.927630][T10094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.937770][T10094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.956841][T10094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.967503][T10094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.975888][T10094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 885.411695][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.240346][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.496161][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.509920][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.709908][T12785] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 886.721474][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.738596][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.757953][T12785] vhci_hcd: invalid port number 23 [ 886.989887][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.013906][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.043166][ T5088] Bluetooth: hci2: command tx timeout [ 887.500419][T12640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 887.544610][T12640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 888.782987][T12640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 888.792094][T12812] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1907' resets device [ 889.038576][T12640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.152718][ T5088] Bluetooth: hci2: command tx timeout [ 889.267848][ T11] bridge_slave_1: left allmulticast mode [ 889.302755][ T11] bridge_slave_1: left promiscuous mode [ 889.319093][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.346443][ T11] bridge_slave_0: left allmulticast mode [ 889.369953][ T11] bridge_slave_0: left promiscuous mode [ 889.386246][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.725000][T12828] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 890.054867][T12537] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 890.264619][T12537] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.281415][T12537] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 890.306143][T12537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.366708][T12537] usb 2-1: config 0 descriptor?? [ 890.462026][T12833] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 890.476992][T12833] vhci_hcd: invalid port number 23 [ 891.169125][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.202888][ T5088] Bluetooth: hci2: command tx timeout [ 891.221882][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.250836][ T11] bond0 (unregistering): (slave bond1): Releasing backup interface [ 891.279658][ T11] bond0 (unregistering): Released all slaves [ 893.294259][ T5088] Bluetooth: hci2: command tx timeout [ 893.424426][ T11] bond1 (unregistering): Released all slaves [ 893.623303][ T5133] usb 2-1: USB disconnect, device number 15 [ 893.750653][T12759] chnl_net:caif_netlink_parms(): no params data found [ 894.553344][T12868] netlink: 'syz.1.1925': attribute type 2 has an invalid length. [ 894.564457][T12868] netlink: 'syz.1.1925': attribute type 1 has an invalid length. [ 894.573105][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'. [ 894.782799][ T29] audit: type=1804 audit(1719479576.346:1385): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1925" name="/root/syzkaller.RuJQlX/183/file0" dev="sda1" ino=2032 res=1 errno=0 [ 894.932490][ T29] audit: type=1804 audit(1719479576.386:1386): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1925" name="/root/syzkaller.RuJQlX/183/file0" dev="sda1" ino=2032 res=1 errno=0 [ 896.169404][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.187201][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.222562][T12759] bridge_slave_0: entered allmulticast mode [ 896.259575][ T29] audit: type=1326 audit(1719479577.996:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12874 comm="syz.0.1926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 896.282929][T12759] bridge_slave_0: entered promiscuous mode [ 896.301550][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.312990][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.329526][T12759] bridge_slave_1: entered allmulticast mode [ 896.365830][T12759] bridge_slave_1: entered promiscuous mode [ 896.477709][ T11] hsr_slave_0: left promiscuous mode [ 896.508493][ T11] hsr_slave_1: left promiscuous mode [ 896.531174][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.555122][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.588036][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.600527][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.015615][ T11] veth1_vlan: left promiscuous mode [ 897.022178][ T11] veth0_vlan: left promiscuous mode [ 897.594218][ T933] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 897.789214][ T933] usb 3-1: config index 0 descriptor too short (expected 59460, got 68) [ 897.806244][ T933] usb 3-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 897.827422][ T933] usb 3-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 897.856999][ T933] usb 3-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 897.897679][ T933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.910076][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 897.938925][ T933] usb 3-1: SerialNumber: syz [ 898.190435][ T933] usb 3-1: USB disconnect, device number 6 [ 898.478435][ T11] team0 (unregistering): Port device team_slave_1 removed [ 898.584594][ T11] team0 (unregistering): Port device team_slave_0 removed [ 900.609007][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.718616][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.814777][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.258037][T12759] team0: Port device team_slave_0 added [ 901.304206][T12759] team0: Port device team_slave_1 added [ 901.361960][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.481891][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.489363][ T7982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.507420][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.515056][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.555904][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.583095][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.590438][ T7982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.605750][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.613229][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.640077][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.029157][T12759] hsr_slave_0: entered promiscuous mode [ 902.066807][T12759] hsr_slave_1: entered promiscuous mode [ 902.102530][T12759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.110169][T12759] Cannot create hsr debugfs directory [ 903.702462][ T29] audit: type=1326 audit(1719479585.026:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7fc00000 [ 903.829276][ T29] audit: type=1800 audit(1719479585.576:1389): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1946" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 904.883380][ T11] IPVS: stop unused estimator thread 0... [ 905.450513][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.780454][T12640] veth0_vlan: entered promiscuous mode [ 905.805812][T12640] veth1_vlan: entered promiscuous mode [ 906.199351][T12640] veth0_macvtap: entered promiscuous mode [ 906.226317][T12640] veth1_macvtap: entered promiscuous mode [ 906.347669][ T29] audit: type=1400 audit(1719479588.096:1390): avc: denied { ioctl } for pid=12965 comm="syz.1.1949" path="socket:[49353]" dev="sockfs" ino=49353 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 906.356803][T12759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 906.449900][T12759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 906.457118][T12968] x_tables: duplicate underflow at hook 3 [ 906.533107][T12966] veth0_vlan: left promiscuous mode [ 906.746342][T12759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 906.764232][T12759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 906.852147][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.897105][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.942624][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.972553][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.992449][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.018438][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.042453][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.061213][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.084469][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.175139][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.210444][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.230221][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.240878][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.258907][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.271346][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.283848][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.297805][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.314245][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.370677][T12640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.384256][T12640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.393974][T12640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.407835][T12640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.769368][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.780738][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.917553][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.939337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.952548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.050929][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.374011][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.381307][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.292030][ T29] audit: type=1326 audit(1719479590.756:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 909.485205][T12998] gadgetfs: Unknown parameter 'acl' [ 909.546619][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.553983][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.020428][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.272576][T12995] ALSA: mixer_oss: invalid OSS volume '' [ 910.316276][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.596869][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.900144][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.122550][ T29] audit: type=1800 audit(1719479592.866:1392): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1960" name="bus" dev="sda1" ino=2032 res=0 errno=0 [ 911.150206][T12759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 911.599241][ T12] bridge_slave_1: left allmulticast mode [ 911.626087][ T12] bridge_slave_1: left promiscuous mode [ 911.648333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.684096][ T12] bridge_slave_0: left allmulticast mode [ 911.689926][ T12] bridge_slave_0: left promiscuous mode [ 911.733641][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.094918][ T29] audit: type=1800 audit(1719479593.816:1393): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1961" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 912.399765][T13022] x_tables: duplicate underflow at hook 3 [ 912.906700][T10094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.920738][T10094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.929603][T10094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.939265][T10094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.954688][T10094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 912.965456][T10094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.161783][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.188357][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.209448][ T12] bond0 (unregistering): Released all slaves [ 913.683056][ T29] audit: type=1400 audit(1719479595.426:1394): avc: denied { open } for pid=13028 comm="syz.0.1963" path="/dev/ttyq4" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 913.706746][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.985610][ T29] audit: type=1400 audit(1719479595.736:1395): avc: denied { setopt } for pid=13039 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 914.005697][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.066975][ T5132] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 914.122415][T12205] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 914.146890][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.187359][T13029] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 914.226988][T13029] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes) [ 914.240119][ T12] hsr_slave_0: left promiscuous mode [ 914.254555][ T12] hsr_slave_1: left promiscuous mode [ 914.265470][ T5132] usb 2-1: config index 0 descriptor too short (expected 59460, got 68) [ 914.277299][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.286546][ T5132] usb 2-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 914.302467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.303704][ T5132] usb 2-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 914.320334][ T5132] usb 2-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 914.331843][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.350039][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.352761][ T5132] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 914.366695][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 914.377955][T12205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.382854][ T5132] usb 2-1: SerialNumber: syz [ 914.396712][T12205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.408696][T12205] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 914.418314][T12205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 914.426755][T12205] usb 1-1: SerialNumber: syz [ 914.458131][ T12] veth1_macvtap: left promiscuous mode [ 914.464503][ T12] veth0_macvtap: left promiscuous mode [ 914.470810][ T12] veth1_vlan: left promiscuous mode [ 914.476653][ T12] veth0_vlan: left promiscuous mode [ 914.642602][ T5132] usb 2-1: USB disconnect, device number 16 [ 914.721787][T12205] usb 1-1: 0:2 : does not exist [ 914.752963][T12205] usb 1-1: unit 5: unexpected type 0x0a [ 914.803719][T12205] usb 1-1: USB disconnect, device number 10 [ 915.043130][T10094] Bluetooth: hci4: command tx timeout [ 916.012402][ T12] team0 (unregistering): Port device team_slave_1 removed [ 916.135178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 917.315595][T10094] Bluetooth: hci4: command 0x041b tx timeout [ 917.341484][ T29] audit: type=1326 audit(1719479598.866:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13069 comm="syz.2.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7fc00000 [ 917.538185][ T29] audit: type=1804 audit(1719479599.286:1397): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1973" name="/root/syzkaller.a8N9tB/383/cgroup.controllers" dev="sda1" ino=2029 res=1 errno=0 [ 917.768060][ T29] audit: type=1800 audit(1719479599.496:1398): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1974" name="bus" dev="sda1" ino=2029 res=0 errno=0 [ 919.110534][T13024] chnl_net:caif_netlink_parms(): no params data found [ 919.363572][T10094] Bluetooth: hci4: command 0x041b tx timeout [ 919.512885][ T29] audit: type=1326 audit(1719479601.256:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13093 comm="syz.0.1977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 919.696665][T13100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.724673][T13103] sctp: [Deprecated]: syz.0.1977 (pid 13103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 919.724673][T13103] Use struct sctp_sack_info instead [ 919.912967][T13100] overlayfs: failed to resolve './file1': -2 [ 919.961622][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.983288][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.990636][T13024] bridge_slave_0: entered allmulticast mode [ 920.015058][T13024] bridge_slave_0: entered promiscuous mode [ 920.041616][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.072776][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.080494][T13024] bridge_slave_1: entered allmulticast mode [ 920.090087][T13024] bridge_slave_1: entered promiscuous mode [ 920.201131][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.237210][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.408562][T12759] veth0_vlan: entered promiscuous mode [ 920.469684][T13024] team0: Port device team_slave_0 added [ 920.501815][T13024] team0: Port device team_slave_1 added [ 921.523602][T10094] Bluetooth: hci4: command 0x041b tx timeout [ 921.742855][ T29] audit: type=1326 audit(1719479603.276:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.0.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x7fc00000 [ 921.821979][ T29] audit: type=1804 audit(1719479603.526:1401): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1983" name="/root/syzkaller.RuJQlX/201/cgroup.controllers" dev="sda1" ino=1994 res=1 errno=0 [ 921.899249][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.921377][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.969218][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.029258][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.051664][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.128459][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.139060][T13124] Process accounting resumed [ 922.163173][T12759] veth1_vlan: entered promiscuous mode [ 922.546573][T13024] hsr_slave_0: entered promiscuous mode [ 922.561105][T13024] hsr_slave_1: entered promiscuous mode [ 922.708515][T13129] UBIFS error (pid: 13129): cannot open "./file0", error -22 [ 922.728005][T12759] veth0_macvtap: entered promiscuous mode [ 922.916557][T12759] veth1_macvtap: entered promiscuous mode [ 923.237846][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.292358][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.304726][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.315420][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.325859][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.366060][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.387899][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.425299][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.427831][ T29] audit: type=1800 audit(1719479605.176:1402): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1988" name="bus" dev="sda1" ino=2024 res=0 errno=0 [ 923.444723][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.526668][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.542621][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.562391][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.578100][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.604342][T10094] Bluetooth: hci4: command 0x041b tx timeout [ 923.683207][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.756181][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.793616][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.814988][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.866211][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.151510][T12759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.169665][T12759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.186125][T12759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.212073][T12759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.701837][ T29] audit: type=1326 audit(1719479606.446:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.0.1991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 924.816218][T13145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.857572][T13145] sctp: [Deprecated]: syz.0.1991 (pid 13145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 924.857572][T13145] Use struct sctp_sack_info instead [ 925.074422][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.097012][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.099828][T13145] overlayfs: failed to resolve './file1': -2 [ 925.334166][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.342086][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.586918][T13024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 925.623120][T13024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 925.657096][T13024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 926.566994][T13156] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 926.606927][T13024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 926.625065][ T29] audit: type=1326 audit(1719479608.316:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270975ae9 code=0x7fc00000 [ 927.114439][ T11] bridge_slave_1: left allmulticast mode [ 927.123984][ T11] bridge_slave_1: left promiscuous mode [ 927.143459][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.214595][ T11] bridge_slave_0: left allmulticast mode [ 927.253961][ T11] bridge_slave_0: left promiscuous mode [ 927.259783][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.309824][ T29] audit: type=1400 audit(1719479609.056:1405): avc: denied { unmount } for pid=7732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 927.547729][T13171] binder_alloc: 13161: binder_alloc_buf, no vma [ 928.619415][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 929.789159][T13185] xt_SECMARK: invalid mode: 0 [ 929.920490][ T29] audit: type=1800 audit(1719479611.666:1406): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2000" name="bus" dev="sda1" ino=2038 res=0 errno=0 [ 930.030620][T13189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.739086][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.778155][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.792496][ T11] bond0 (unregistering): Released all slaves [ 930.828718][ T29] audit: type=1326 audit(1719479612.576:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.1.2005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x0 [ 930.972177][T13201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.018638][T13201] sctp: [Deprecated]: syz.1.2005 (pid 13201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.018638][T13201] Use struct sctp_sack_info instead [ 931.282541][T13203] overlayfs: failed to resolve './file1': -2 [ 931.679648][T13214] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 932.430230][ T11] hsr_slave_0: left promiscuous mode [ 932.450225][ T11] hsr_slave_1: left promiscuous mode [ 932.474167][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.499735][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.513809][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.553937][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.760135][ T11] veth1_vlan: left promiscuous mode [ 933.466210][ T11] veth0_vlan: left promiscuous mode [ 934.224960][T10094] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 934.605190][ T29] audit: type=1804 audit(1719479616.356:1408): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2014" name="/root/syzkaller.2whPZg/6/bus" dev="sda1" ino=2039 res=1 errno=0 [ 934.675077][ T29] audit: type=1804 audit(1719479616.426:1409): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2014" name="/root/syzkaller.2whPZg/6/bus" dev="sda1" ino=2039 res=1 errno=0 [ 935.157092][ T11] team0 (unregistering): Port device team_slave_1 removed [ 935.410578][ T11] team0 (unregistering): Port device team_slave_0 removed [ 936.854615][T13242] xt_SECMARK: invalid mode: 0 [ 937.047220][T13243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.173217][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 937.214892][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.221477][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.510094][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.711989][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.765186][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.772519][ T9133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.833291][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.840580][T12537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.896359][ T29] audit: type=1326 audit(1719479619.636:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.2019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 937.896990][T13250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.060907][T13252] sctp: [Deprecated]: syz.0.2019 (pid 13252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.060907][T13252] Use struct sctp_sack_info instead [ 938.221205][ T29] audit: type=1400 audit(1719479619.946:1411): avc: denied { nlmsg_write } for pid=13253 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 938.548835][T13250] overlayfs: failed to resolve './file1': -2 [ 939.173518][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.205889][T13024] veth0_vlan: entered promiscuous mode [ 940.224573][ T29] audit: type=1804 audit(1719479621.976:1412): pid=13269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2024" name="/root/syzkaller.2whPZg/10/cgroup.controllers" dev="sda1" ino=2024 res=1 errno=0 [ 940.265250][T13024] veth1_vlan: entered promiscuous mode [ 940.345463][T13024] veth0_macvtap: entered promiscuous mode [ 940.381243][T13024] veth1_macvtap: entered promiscuous mode [ 940.519488][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.562317][ T29] audit: type=1804 audit(1719479622.286:1413): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2025" name="/root/syzkaller.RuJQlX/215/bus" dev="sda1" ino=2040 res=1 errno=0 [ 940.582461][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.652569][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.909180][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.919209][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.930780][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.946337][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.429270][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.816335][ T29] audit: type=1326 audit(1719479623.566:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13279 comm="syz.0.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 941.855546][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.897847][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.961273][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.978990][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.012247][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.032302][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.058124][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 942.062243][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.094015][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.130193][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.169959][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.279187][T13024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.306307][T13024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.336278][T13024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.362446][T13024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.704462][ T29] audit: type=1326 audit(1719479624.446:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.0.2033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x0 [ 942.778787][T13297] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2032' resets device [ 942.825281][T13298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.881145][T13298] sctp: [Deprecated]: syz.0.2033 (pid 13298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 942.881145][T13298] Use struct sctp_sack_info instead [ 942.923881][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.945689][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.059263][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.071384][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.080608][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.083923][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.110169][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.118334][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 943.128798][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.134136][T13299] overlayfs: failed to resolve './file1': -2 [ 943.191888][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.877637][T10094] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 944.160150][ T5900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.181758][ T29] audit: type=1804 audit(1719479625.916:1416): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2037" name="/root/syzkaller.2whPZg/14/cgroup.controllers" dev="sda1" ino=2017 res=1 errno=0 [ 944.427533][ T5900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.589609][ T5900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.745930][ T5900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.791071][T13300] chnl_net:caif_netlink_parms(): no params data found [ 945.024470][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.031715][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.039208][T13300] bridge_slave_0: entered allmulticast mode [ 945.048453][T13300] bridge_slave_0: entered promiscuous mode [ 945.060722][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.068060][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.075433][T13300] bridge_slave_1: entered allmulticast mode [ 945.084682][T13300] bridge_slave_1: entered promiscuous mode [ 945.188208][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.204260][T10094] Bluetooth: hci5: command tx timeout [ 945.218400][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.228054][ T5900] bridge_slave_1: left allmulticast mode [ 945.234078][ T5900] bridge_slave_1: left promiscuous mode [ 945.239926][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.254655][ T5900] bridge_slave_0: left allmulticast mode [ 945.260372][ T5900] bridge_slave_0: left promiscuous mode [ 945.266439][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.029013][ T29] audit: type=1804 audit(1719479627.776:1417): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2040" name="/root/syzkaller.2whPZg/15/bus" dev="sda1" ino=2039 res=1 errno=0 [ 947.286682][T10094] Bluetooth: hci5: command tx timeout [ 947.374637][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 947.386869][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 947.395779][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 947.405073][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 947.414167][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 947.421736][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 948.299966][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.393946][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.416538][ T5900] bond0 (unregistering): Released all slaves [ 949.321194][T13300] team0: Port device team_slave_0 added [ 949.355497][T13300] team0: Port device team_slave_1 added [ 949.363108][T10094] Bluetooth: hci5: command tx timeout [ 949.521467][T13353] gadgetfs: Unknown parameter 'acl' [ 949.527242][T10094] Bluetooth: hci3: command tx timeout [ 949.536094][T10094] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 949.940836][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.961284][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.995497][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.401773][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.436817][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.497341][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.796033][ T5900] hsr_slave_0: left promiscuous mode [ 950.820256][ T5900] hsr_slave_1: left promiscuous mode [ 950.846838][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.869034][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.901289][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.912662][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.956854][ T5900] veth1_macvtap: left promiscuous mode [ 950.965070][ T5900] veth0_macvtap: left promiscuous mode [ 950.971922][ T5900] veth1_vlan: left promiscuous mode [ 950.998115][ T5900] veth0_vlan: left promiscuous mode [ 951.442430][T10094] Bluetooth: hci5: command tx timeout [ 951.602499][T10094] Bluetooth: hci3: command tx timeout [ 952.009432][T13378] netlink: 'syz.0.2054': attribute type 2 has an invalid length. [ 952.017342][T13378] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 952.025185][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 952.052346][ T29] audit: type=1804 audit(1719479633.786:1418): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2054" name="/root/syzkaller.pbotiS/64/file0" dev="sda1" ino=2006 res=1 errno=0 [ 952.118174][ T29] audit: type=1804 audit(1719479633.836:1419): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2054" name="/root/syzkaller.pbotiS/64/file0" dev="sda1" ino=2006 res=1 errno=0 [ 953.442858][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 953.467155][ T29] audit: type=1326 audit(1719479635.206:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13401 comm="syz.4.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94e4b75ae9 code=0x0 [ 953.581766][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 953.682633][T10094] Bluetooth: hci3: command tx timeout [ 955.639147][T13300] hsr_slave_0: entered promiscuous mode [ 955.670373][T13300] hsr_slave_1: entered promiscuous mode [ 955.762558][T10094] Bluetooth: hci3: command tx timeout [ 958.853274][ T29] audit: type=1326 audit(1719479640.436:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x7fc00000 [ 958.905903][T13300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.981359][ T29] audit: type=1326 audit(1719479640.436:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc40575ae9 code=0x7fc00000 [ 959.046737][ T29] audit: type=1326 audit(1719479640.436:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x7fc00000 [ 959.101442][ T29] audit: type=1326 audit(1719479640.436:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc40575ae9 code=0x7fc00000 [ 959.203528][T13339] chnl_net:caif_netlink_parms(): no params data found [ 959.291635][T13300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.367757][T13451] CIFS: VFS: Malformed UNC in devname [ 959.529670][T13300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.548288][T13454] netlink: 'syz.1.2080': attribute type 2 has an invalid length. [ 959.556111][T13454] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 959.563890][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 959.574751][ T29] audit: type=1804 audit(1719479641.326:1425): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2080" name="/root/syzkaller.RuJQlX/226/file0" dev="sda1" ino=2036 res=1 errno=0 [ 959.640719][ T29] audit: type=1804 audit(1719479641.346:1426): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2080" name="/root/syzkaller.RuJQlX/226/file0" dev="sda1" ino=2036 res=1 errno=0 [ 959.848928][T13300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.297221][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.326802][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.335149][T13339] bridge_slave_0: entered allmulticast mode [ 960.344676][T13339] bridge_slave_0: entered promiscuous mode [ 960.357328][ T5900] bridge_slave_1: left allmulticast mode [ 960.365920][ T5900] bridge_slave_1: left promiscuous mode [ 960.372252][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.399034][ T5900] bridge_slave_0: left allmulticast mode [ 960.415833][ T5900] bridge_slave_0: left promiscuous mode [ 960.429050][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.493756][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 960.532434][ T29] audit: type=1400 audit(1719479642.266:1427): avc: denied { ioctl } for pid=13472 comm="syz.0.2085" path="/dev/ptyq5" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 962.141431][T13485] CIFS: VFS: Malformed UNC in devname [ 962.520538][ T29] audit: type=1326 audit(1719479644.246:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13495 comm="syz.1.2094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x0 [ 962.578363][T13494] UBIFS error (pid: 13494): cannot open "./file0", error -22 [ 962.632467][ T785] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 962.842154][ T785] usb 5-1: config index 0 descriptor too short (expected 59460, got 68) [ 962.857985][ T785] usb 5-1: config 191 has too many interfaces: 151, using maximum allowed: 32 [ 962.867471][ T785] usb 5-1: config 191 has an invalid descriptor of length 127, skipping remainder of the config [ 962.896164][ T785] usb 5-1: config 191 has 0 interfaces, different from the descriptor's value: 151 [ 962.971616][ T785] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 962.986436][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 962.989970][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.023780][ T785] usb 5-1: SerialNumber: syz [ 963.076179][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.128488][ T5900] bond0 (unregistering): Released all slaves [ 963.164310][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.185490][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.226218][T13339] bridge_slave_1: entered allmulticast mode [ 963.284671][T13339] bridge_slave_1: entered promiscuous mode [ 963.316699][ T785] usb 5-1: USB disconnect, device number 12 [ 963.577071][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.665458][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.920289][T13339] team0: Port device team_slave_0 added [ 963.981485][ T5900] hsr_slave_0: left promiscuous mode [ 964.021053][ T5900] hsr_slave_1: left promiscuous mode [ 964.044458][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.063094][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.071729][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.079761][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.130726][ T5900] veth1_vlan: left promiscuous mode [ 967.962008][T13522] CIFS: VFS: Malformed UNC in devname [ 968.677278][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 968.829985][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 970.025589][T13339] team0: Port device team_slave_1 added [ 970.133548][T13300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 970.269343][T13300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 970.325915][T13300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 970.451507][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.533857][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.570974][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.617666][T13300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 970.674706][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.682646][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.192386][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.386987][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2113'. [ 974.646107][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2113'. [ 974.754437][T13339] hsr_slave_0: entered promiscuous mode [ 974.764286][T13339] hsr_slave_1: entered promiscuous mode [ 974.774558][T13339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.782318][T13339] Cannot create hsr debugfs directory [ 974.929526][T13561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2113'. [ 975.275238][T13300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.388037][ T29] audit: type=1326 audit(1719479656.946:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 975.453737][ T29] audit: type=1326 audit(1719479656.946:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 975.478341][ T29] audit: type=1326 audit(1719479656.946:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 975.502325][ T29] audit: type=1326 audit(1719479656.946:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 975.541522][ T29] audit: type=1326 audit(1719479656.946:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.1.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4c775ae9 code=0x7fc00000 [ 975.544896][T13300] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.570460][ T29] audit: type=1400 audit(1719479657.276:1434): avc: denied { ioctl } for pid=13565 comm="syz.1.2114" path="socket:[53705]" dev="sockfs" ino=53705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 975.663210][ T933] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.670663][ T933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.816498][ T933] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.824127][ T933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.460439][ T5900] IPVS: stop unused estimator thread 0... [ 976.872521][T12205] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 976.895708][T13339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.940154][T13339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 976.969455][T13339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 977.001364][T13339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 977.060050][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.062400][T12205] usb 1-1: Using ep0 maxpacket: 8 [ 977.094736][T12205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.118923][T12205] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 977.140255][T12205] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 977.170733][T12205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.195134][T12205] usb 1-1: config 0 descriptor?? [ 978.605089][T13300] veth0_vlan: entered promiscuous mode [ 978.728236][T13300] veth1_vlan: entered promiscuous mode [ 978.950392][T13300] veth0_macvtap: entered promiscuous mode [ 979.035490][T13300] veth1_macvtap: entered promiscuous mode [ 979.108225][T13339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.268988][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.300615][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.315177][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.337930][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.368662][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.394753][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.412343][T12500] usb 1-1: USB disconnect, device number 11 [ 979.446242][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.513548][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.535881][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.548443][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.562253][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.572973][T13300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.583637][T13300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.596634][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.621335][T13339] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.685840][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.693092][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.733442][T13300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.780081][T13300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.801271][T13300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.822312][T13300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.909341][T12500] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.916684][T12500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.390075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.418540][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.655698][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.686569][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.311654][T13339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.321008][ T5131] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 981.501483][T13339] veth0_vlan: entered promiscuous mode [ 981.537656][ T5131] usb 3-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 981.565570][ T5131] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.580700][ T5131] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 981.590720][ T5131] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 981.600781][ T5131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.612821][T13339] veth1_vlan: entered promiscuous mode [ 981.663630][ T5131] usb 3-1: config 0 descriptor?? [ 981.735465][T13631] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 981.751290][T13631] vhci_hcd: invalid port number 23 [ 981.785134][T13339] veth0_macvtap: entered promiscuous mode [ 981.816365][T13339] veth1_macvtap: entered promiscuous mode [ 981.907415][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.938406][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.949238][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.963360][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.973688][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.984493][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.014837][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.035735][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.079232][T13339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.131956][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.175137][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.202639][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.221433][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.254001][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.295920][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.321939][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.348548][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.406391][T13339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.479615][T13339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.510367][T13339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.519652][T13339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.532735][T13339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.023236][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.047334][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.295593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.307503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.516129][T10094] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 983.668925][T13651] netlink: 'syz.1.2141': attribute type 12 has an invalid length. [ 983.833824][T13651] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 984.142275][ T5133] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 984.567053][ T933] usb 3-1: USB disconnect, device number 7 [ 984.685807][ T5133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.727122][ T5133] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 984.738688][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.769968][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.787400][ T5133] usb 2-1: config 0 descriptor?? [ 985.033482][ T5133] usb 2-1: USB disconnect, device number 17 [ 985.042226][ C1] ================================================================== [ 985.050352][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0x186/0x1a0 [ 985.057707][ C1] Read of size 8 at addr ffffc9000333fba0 by task syz-executor/13300 [ 985.065817][ C1] [ 985.068170][ C1] CPU: 1 PID: 13300 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 985.078523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 985.088599][ C1] Call Trace: [ 985.091903][ C1] [ 985.094759][ C1] dump_stack_lvl+0x116/0x1f0 [ 985.099466][ C1] print_report+0xc3/0x620 [ 985.103914][ C1] ? __virt_addr_valid+0x5e/0x580 [ 985.108947][ C1] kasan_report+0xd9/0x110 [ 985.113388][ C1] ? profile_pc+0x186/0x1a0 [ 985.117927][ C1] ? profile_pc+0x186/0x1a0 [ 985.122468][ C1] ? queued_read_lock_slowpath+0x131/0x2b1 [ 985.128328][ C1] profile_pc+0x186/0x1a0 [ 985.132693][ C1] profile_tick+0xd3/0x140 [ 985.137158][ C1] tick_nohz_handler+0x380/0x530 [ 985.142143][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 985.147635][ C1] __hrtimer_run_queues+0x657/0xcc0 [ 985.152861][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 985.158616][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 985.164707][ C1] hrtimer_interrupt+0x31b/0x800 [ 985.169658][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 985.175672][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 985.181353][ C1] [ 985.184302][ C1] [ 985.187249][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 985.193276][ C1] RIP: 0010:queued_read_lock_slowpath+0x131/0x2b1 [ 985.199763][ C1] Code: 85 45 01 00 00 8b 03 84 c0 74 36 48 b8 00 00 00 00 00 fc ff df 49 89 de 48 89 dd 49 c1 ee 03 83 e5 07 49 01 c6 83 c5 03 f3 90 <41> 0f b6 06 40 38 c5 7c 08 84 c0 0f 85 1f 01 00 00 8b 03 84 c0 75 [ 985.219411][ C1] RSP: 0018:ffffc9000333fb98 EFLAGS: 00000286 [ 985.225497][ C1] RAX: 00000000000002ff RBX: ffffffff8d80a080 RCX: ffffffff8aeb10cb [ 985.233503][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d80a080 [ 985.241503][ C1] RBP: 0000000000000003 R08: 0000000000000001 R09: fffffbfff1b01410 [ 985.249477][ C1] R10: ffffffff8d80a083 R11: 0000000000000000 R12: 1ffff92000667f74 [ 985.257453][ C1] R13: ffffffff8d80a084 R14: fffffbfff1b01410 R15: ffffffff81519b09 [ 985.265429][ C1] ? do_wait+0x1e9/0x570 [ 985.269720][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 985.275472][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 985.281227][ C1] ? __pfx_queued_read_lock_slowpath+0x10/0x10 [ 985.287409][ C1] __do_wait+0x105/0x890 [ 985.291673][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 985.297501][ C1] ? do_wait+0x1e9/0x570 [ 985.301758][ C1] do_wait+0x219/0x570 [ 985.305847][ C1] kernel_wait4+0x16c/0x280 [ 985.310369][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 985.315429][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 985.321106][ C1] ? __might_fault+0xe3/0x190 [ 985.325794][ C1] __do_sys_wait4+0x15f/0x170 [ 985.330503][ C1] ? __pfx___do_sys_wait4+0x10/0x10 [ 985.335752][ C1] ? restore_altstack+0x110/0x170 [ 985.340827][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 985.346661][ C1] do_syscall_64+0xcd/0x250 [ 985.351179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.357090][ C1] RIP: 0033:0x7f741796be17 [ 985.361508][ C1] Code: 89 7c 24 10 48 89 4c 24 18 e8 85 14 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 d5 14 03 00 8b 44 [ 985.381131][ C1] RSP: 002b:00007ffd74d4e6d0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 985.389554][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f741796be17 [ 985.397546][ C1] RDX: 0000000040000001 RSI: 00007ffd74d4e74c RDI: 00000000ffffffff [ 985.405544][ C1] RBP: 00007ffd74d4e74c R08: 0000000000000000 R09: 00007f7418662080 [ 985.413537][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 985.421535][ C1] R13: 00000000000f0754 R14: 00000000000f0629 R15: 00007ffd74d4e7b0 [ 985.429542][ C1] [ 985.432577][ C1] [ 985.434920][ C1] The buggy address belongs to stack of task syz-executor/13300 [ 985.442576][ C1] and is located at offset 0 in frame: [ 985.448137][ C1] queued_read_lock_slowpath+0x0/0x2b1 [ 985.453619][ C1] [ 985.455960][ C1] This frame has 1 object: [ 985.460396][ C1] [32, 36) 'val' [ 985.460411][ C1] [ 985.466389][ C1] The buggy address belongs to the virtual mapping at [ 985.466389][ C1] [ffffc90003338000, ffffc90003341000) created by: [ 985.466389][ C1] kernel_clone+0xfd/0x980 [ 985.483865][ C1] [ 985.486212][ C1] The buggy address belongs to the physical page: [ 985.492641][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888021c9b140 pfn:0x21c9b [ 985.502741][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 985.509936][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 985.518530][ C1] raw: ffff888021c9b140 0000000000000000 00000001ffffffff 0000000000000000 [ 985.527139][ C1] page dumped because: kasan: bad access detected [ 985.533570][ C1] page_owner tracks the page as allocated [ 985.539306][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 13258, tgid 13258 (syz.1.2022), ts 938828984673, free_ts 938731310669 [ 985.557893][ C1] post_alloc_hook+0x2d1/0x350 [ 985.562668][ C1] get_page_from_freelist+0x136a/0x2e50 [ 985.568220][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 985.573511][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 985.578975][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 985.584879][ C1] copy_process+0x2f38/0x8f10 [ 985.589563][ C1] kernel_clone+0xfd/0x980 [ 985.593989][ C1] __do_sys_clone3+0x1f5/0x270 [ 985.598762][ C1] do_syscall_64+0xcd/0x250 [ 985.603272][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.609175][ C1] page last free pid 13260 tgid 13260 stack trace: [ 985.615668][ C1] free_unref_folios+0x991/0x1310 [ 985.620697][ C1] folios_put_refs+0x487/0x6d0 [ 985.625471][ C1] free_pages_and_swap_cache+0x36d/0x510 [ 985.631112][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 985.637097][ C1] tlb_finish_mmu+0x168/0x7b0 [ 985.641765][ C1] exit_mmap+0x3d1/0xb20 [ 985.646009][ C1] __mmput+0x12a/0x4d0 [ 985.650078][ C1] mmput+0x62/0x70 [ 985.653794][ C1] do_exit+0x9b7/0x2ba0 [ 985.657971][ C1] do_group_exit+0xd3/0x2a0 [ 985.662509][ C1] __x64_sys_exit_group+0x3e/0x50 [ 985.667544][ C1] do_syscall_64+0xcd/0x250 [ 985.672061][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.677963][ C1] [ 985.680283][ C1] Memory state around the buggy address: [ 985.685925][ C1] ffffc9000333fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 985.693990][ C1] ffffc9000333fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 985.702045][ C1] >ffffc9000333fb80: 00 00 00 00 f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 [ 985.710099][ C1] ^ [ 985.715198][ C1] ffffc9000333fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 985.723257][ C1] ffffc9000333fc80: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 [ 985.731310][ C1] ================================================================== [ 985.739358][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 985.746539][ C1] CPU: 1 PID: 13300 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 985.756883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 985.766934][ C1] Call Trace: [ 985.770212][ C1] [ 985.773065][ C1] dump_stack_lvl+0x3d/0x1f0 [ 985.777671][ C1] panic+0x6f5/0x7a0 [ 985.781577][ C1] ? __pfx_panic+0x10/0x10 [ 985.786014][ C1] ? rcu_is_watching+0x12/0xc0 [ 985.790779][ C1] ? __pfx_lock_release+0x10/0x10 [ 985.795811][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 985.800939][ C1] check_panic_on_warn+0xab/0xb0 [ 985.805893][ C1] end_report+0x117/0x180 [ 985.810266][ C1] kasan_report+0xe9/0x110 [ 985.814713][ C1] ? profile_pc+0x186/0x1a0 [ 985.819230][ C1] ? profile_pc+0x186/0x1a0 [ 985.823744][ C1] ? queued_read_lock_slowpath+0x131/0x2b1 [ 985.829557][ C1] profile_pc+0x186/0x1a0 [ 985.833914][ C1] profile_tick+0xd3/0x140 [ 985.838343][ C1] tick_nohz_handler+0x380/0x530 [ 985.843289][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 985.848753][ C1] __hrtimer_run_queues+0x657/0xcc0 [ 985.853958][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 985.859688][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 985.865790][ C1] hrtimer_interrupt+0x31b/0x800 [ 985.870738][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 985.876753][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 985.882391][ C1] [ 985.885329][ C1] [ 985.888256][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 985.894251][ C1] RIP: 0010:queued_read_lock_slowpath+0x131/0x2b1 [ 985.900682][ C1] Code: 85 45 01 00 00 8b 03 84 c0 74 36 48 b8 00 00 00 00 00 fc ff df 49 89 de 48 89 dd 49 c1 ee 03 83 e5 07 49 01 c6 83 c5 03 f3 90 <41> 0f b6 06 40 38 c5 7c 08 84 c0 0f 85 1f 01 00 00 8b 03 84 c0 75 [ 985.920302][ C1] RSP: 0018:ffffc9000333fb98 EFLAGS: 00000286 [ 985.926399][ C1] RAX: 00000000000002ff RBX: ffffffff8d80a080 RCX: ffffffff8aeb10cb [ 985.934386][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d80a080 [ 985.942370][ C1] RBP: 0000000000000003 R08: 0000000000000001 R09: fffffbfff1b01410 [ 985.950350][ C1] R10: ffffffff8d80a083 R11: 0000000000000000 R12: 1ffff92000667f74 [ 985.958324][ C1] R13: ffffffff8d80a084 R14: fffffbfff1b01410 R15: ffffffff81519b09 [ 985.966320][ C1] ? do_wait+0x1e9/0x570 [ 985.970585][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 985.976329][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 985.982055][ C1] ? __pfx_queued_read_lock_slowpath+0x10/0x10 [ 985.988218][ C1] __do_wait+0x105/0x890 [ 985.992475][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 985.998285][ C1] ? do_wait+0x1e9/0x570 [ 986.002554][ C1] do_wait+0x219/0x570 [ 986.006636][ C1] kernel_wait4+0x16c/0x280 [ 986.011157][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 986.016198][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 986.021842][ C1] ? __might_fault+0xe3/0x190 [ 986.026516][ C1] __do_sys_wait4+0x15f/0x170 [ 986.031207][ C1] ? __pfx___do_sys_wait4+0x10/0x10 [ 986.036417][ C1] ? restore_altstack+0x110/0x170 [ 986.041461][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 986.047278][ C1] do_syscall_64+0xcd/0x250 [ 986.051791][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.057698][ C1] RIP: 0033:0x7f741796be17 [ 986.062113][ C1] Code: 89 7c 24 10 48 89 4c 24 18 e8 85 14 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 d5 14 03 00 8b 44 [ 986.081738][ C1] RSP: 002b:00007ffd74d4e6d0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 986.090161][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f741796be17 [ 986.098133][ C1] RDX: 0000000040000001 RSI: 00007ffd74d4e74c RDI: 00000000ffffffff [ 986.106102][ C1] RBP: 00007ffd74d4e74c R08: 0000000000000000 R09: 00007f7418662080 [ 986.114072][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 986.122039][ C1] R13: 00000000000f0754 R14: 00000000000f0629 R15: 00007ffd74d4e7b0 [ 986.130013][ C1] [ 987.286418][ C1] Shutting down cpus with NMI [ 987.291472][ C1] Kernel Offset: disabled [ 987.295806][ C1] Rebooting in 86400 seconds..