last executing test programs: 6m39.60308922s ago: executing program 4 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3f) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) 6m38.527357342s ago: executing program 4 (id=42): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) close_range(r2, 0xffffffffffffffff, 0x0) 6m36.824808002s ago: executing program 4 (id=43): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xee, 0x3b, 0x25, 0x20, 0x65a, 0x9, 0x6065, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0x40, 0x0, [{{0x9, 0x4, 0x8, 0x1, 0x0, 0xb0, 0xd7, 0x42, 0x2}}]}}]}}, 0x0) 6m32.233209251s ago: executing program 4 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) 6m30.277834162s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) 6m28.857752266s ago: executing program 4 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x4004) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0xffa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r2}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) unshare(0x6a040000) bind$alg(0xffffffffffffffff, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='start_task_reaping\x00', r1}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xffffffff}, {0x6c}, {0x6}]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x2000, 0x4) getsockopt$inet_int(r6, 0x0, 0xb, 0x0, &(0x7f0000000000)) 5m52.104747479s ago: executing program 2 (id=103): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYBLOB="00703db0fe4eac5594b77091e7b16ca6b0000000000000140012800b0001000800"/45, @ANYRES32=r2, @ANYBLOB="0800040000010000"], 0x44}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 5m51.295696358s ago: executing program 2 (id=104): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x8001}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) 5m49.137819716s ago: executing program 2 (id=107): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x20000000, 0x500}}, 0x3c) 5m44.73705059s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0xffffffbe, &(0x7f00000002c0)=[{&(0x7f0000000080)="de", 0xc0e77043}], 0x1}, 0x2000c054) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180081b2aceeb8fe94697c0050a722821d42dd4600000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0xfffffffffffffd78}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYBLOB="00000085000000a50000001e0100002020640500000000002020207b1af8ff00000000bfa10000000000000701000067f8ffffffb702000008000000b703000000000000a500000008000000"], 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000001c0), 0x12) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], 0x238}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5m43.627100092s ago: executing program 2 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "e0ffff13000000000000000000000000000000100000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0383e04, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000001a40)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000440), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340), 0x48) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000001d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x1d, 0x1, 0x9, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x0}, 0x40) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) 5m34.262987726s ago: executing program 2 (id=122): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r6, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f00)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'o'}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) 2m12.782532539s ago: executing program 3 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x8000451a, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m9.041521917s ago: executing program 3 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0xffffffbe, &(0x7f00000002c0)=[{&(0x7f0000000080)="de", 0xc0e77043}], 0x1}, 0x2000c054) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000020000000000009053d7aecc4ecaad98bc3d4a0a9e3c18ff92c3ed"], &(0x7f00000000c0)=""/158, 0x26, 0x9e, 0x1}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYBLOB="00000085000000a50000001e0100002020640500000000002020207b1af8ff00000000bfa10000000000000701000067f8ffffffb702000008000000b703000000000000a500000008000000"], 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000001c0), 0x12) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], 0x238}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m7.544837623s ago: executing program 3 (id=327): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x0, 0x937, 0x0, 0x0, 0x0, "8afbb5a85093ef768ede381361ce675f4362d2"}) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) 1m6.934110232s ago: executing program 3 (id=328): r0 = socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xac}}, 0x0) 1m5.464330541s ago: executing program 3 (id=329): creat(0x0, 0x19f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xb}) r4 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xec0, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0x40045010, &(0x7f0000000080)) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d03, 0x0) 1m3.068724028s ago: executing program 3 (id=332): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) unshare(0x68040200) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) unlink(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000002a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7020000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 11.60820709s ago: executing program 0 (id=382): socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x2000, 0x88) getsockname$packet(r4, &(0x7f0000000180), &(0x7f0000000200)=0x14) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x6d, 0x0, 0x69, 0x1}]}}, 0x0, 0x32}, 0xffffff71) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xc, 0x4) 8.820802286s ago: executing program 0 (id=384): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d0000000000291dec98850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82041003d0001000e01030000001f02090400090009001001040000000c000642040004008eff071104007500ffb00e3f03000000000e090300feffa30f08040000021f00"], 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000440), 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) 6.08096697s ago: executing program 0 (id=385): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r0, 0x1) 5.699406756s ago: executing program 0 (id=386): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x200000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x7fff, 0x80, 0xfe, 0x3}, {0xa7, 0xe, 0x80}, {0x9, 0x6, 0x5, 0xb}, {0x6, 0x9, 0x3, 0x7}]}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f800000000000000000000009500000000000008"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000e2000000000000000000006200400000000000aa000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000090000004400038008000300000000001400020076657468315f746f5f7465616d0000000800010001"], 0x58}}, 0x0) 5.532963082s ago: executing program 1 (id=387): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) getpid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x9fc, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x9c6, 0x3a, 0xff, @dev, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, [{0x0, 0x16, "004af660fdcd2a9d3fea8639c367475824e5ff1fec61d05cd2481e5f16a2e0c0c7a77da8e54574913307583a126de92dd2f27575716d36ceade2ad37f45e18289a13311b1525e24fd1078f16a632b7d9e170e1e59580de090000000000000026862b4351000964ab32e55e4339bb2937602534c310d016fa7537403ddcdd12341a16f2bdef862e5ba4d76e965de44b86e123844d8361242c7809117c5eacdc237022f54dc68760d4711978c0575160dd2dfe"}, {0x0, 0x7, "3abc2ac2bfb0f9366574005770a981d0425b685b7f39f2bf671c534e4af4347759f70e051bc102a9d7655956b8bc8486cde8bc388d38"}, {0x0, 0x119, "04640bcae346286d0e12a26ae0b9306929a0b858d121c73730ae09dfd2728cb2b0cce5481bf0927da7d9461cac12d399767fef07a793c77c9628d16b0551a4a033367841b9469c9ef1b9eff68ad8edb00922c3e3518c0926eca71a9b010ae5d9dde15c3ed291778999408550e554455a13bc8f2fe1a284c72c7fb4a12680d256d3677d79c6b2df69b699ef6fb0d7fdafc6e1a028cee81c7bf0702461ebad1952d42a15a3e3906c9e2ca33b0a1005ba756f54c831fe836b3efe7bc4c11d228e93438ca5e1ab9c9fff72cf0d2219f58224c342cac0a80fac82262ee05206e70f21935d7a695a1cc0a94ed336af67e9bac97c7c5fa4f300a0e9ca314da9d26d3c4589546bd588945c97201d5a4088945cc8feabc93170b8faaad5bcc635610e03c5925ce468138598b4f197b89afc19d5cf45771a652011a9963eae8acd27cdadbe46cea242c13964d3177e0cc04f9f2bab688e51081dbde4169bdc7e292e4e0d2ff48ad26617068c541d4ca4e3c59f49cf6016a5c4852bb55d89b92ce72042268e7872d3310fa2692c44d564fa15b7b4d9af0e79eb63f384d1de2b0b5ca67e84df5dfed6fe41f6822fac0b864a433b7e21e1ebd1475abc71dd801239bce9e03385354eb4a4a1250a9682507bce25c85474f186c5610be3fdc53336e0dd39136ab965001fa7d2dc2ac375e31d6681618ce68f2aba5fb5e1fde42d9b5698d49362c3daf8da0b801670c2df17f7d509a7df56be4aacbc3666c25bc6a530c870f6399203bbd58bf121b1310f4abd1ea50a90d308edc540e74d77571b0eea07e5f04d4c283d861f81e213526ea307e085e452338b2f8adad0fa9e71ea8e37595ce1f730107459354e452af2293e475fe35eb836cfade2a387df3dbc02262c76555251fa9c455fc0b517a85c36d0d6d9f9f3db9d0d687a7bc5d71f005416416a4bba57e710285033310091768ace229534932f8e0221e1288a4a1d6fd6c6a6875428155b023e29a4d8d1460b1d05621e102f3b4642c57d954626ec361536f1a24ef71f28dc6f008c13ea4cb45e23a590b436c2319b0629ed8fee581a339a4508149bb46011a5cd9def21802a8869a6669e8e09d118a329d98eeb546f3ea3d915f8983a22e2632c5859d665352bd3c849bdf21bfcd4cd7b7e9b9ea3d75ff09cc306b52c23308356205ca8f6c52b52be52f19fbac9c888e1792022cbde83bb4dda4ec229dc87f704136f2d91bf8e44cfbfeeb8aaf6dcd9a6c9ed49efffafef73a86de6244a93b315f6281f932f54bac128902a219671b6ab7fd25eaee70ac19dfea6a6b2226cafaa3cb429aa377e61d6900a7766c07562306df015162d5209f851e442c22418d487f92f179f3abb7baa6c279ef87572a703aecf8e2ed0c54aed836036bdb3b915f78d38b052310c7a31065903d1cf37565a637f98bc2bdf6a804b0f3916202f72046be4121e0426b9e4894493bc964ce3ed285a60ff003cc1258f47d2133e1fcc47caff9982d7bfba72fede4d0d2ba9a7c4373b579b986b0bb0015d28ac81fdf3744e5bc66118bb7c561e24929cbc4eebe20c01598d246081ea92e6536395c1a393619090e5abf57b9157812d18e82634b43b7931885765bf0d3fb6274badb1b26597ea9f7aff4a6d0e19b3fdb92d3758f4fd43a077ae3e3fc2a719dd764ad3f7d52d62e5b11c8a12a223e2f9d93e51f78a7a36539b95c6b6ba337102a87634cf977fb21a083f6b9968dbb09c7991d1fa780ed86dd4a161e8f2ffbe789894bbd168b8c678ea65a09b23e6773cd4ca1b3490bc6457b0a7474de47cc1b1eae1f787898b63110e47fa0200b5de3fc71841119a8fb60282f4cbcd4139b259eebfd57587c5f9a16c1c069fdf35be821855049d628ef0ebd0970db05cc0f6fe75e99ba934d722870bfabc109b65382059488727e1043db3e195b200856bb9d9f3ad611c89d22e8284158d07e88921ef247c38eb7d224de5ff234ecf9189efbc50fa4b528c0e11de66b32a2d09cb32d124207a2d3001368e76d9efe63014cedf21eab08e7850a63a65a200fc91b347d4a63fd2b571f54f2dc335d8d7edf0e50cd56135560af9a8c7122ada9575a9ec1bf88450da9985c8a21ab82fdf42d6c2d4e60c45e6f0a12e6b9c295c2310822ae00f0a4a66503a17745ff5273d99ca8c295f407ac67045e60f8f2f081eddeef42771604327f479a17a3f6150f253e4f7a163dfedc80ac9a7553d3d70753968d7aace6167d823575428713166f322406c7c36d26bfb2a9b3e431ddc113eb7b6c3c7cdac3ff50db370deb2eb643c5cab9e4e4088bb8c92c6165bb8074f978ac9fe766f3f914e44e4322d83c1d6b2962f5b342e434980b57cbbcfbcbfddc1cd70d6fce8f9a2108ac765ad77d1bedb2e66f3df522114ee7c8cc798a73256460555a76a9b70d5929a7aaa335ec623eb8e7806ab6968e36617018634d8b9b1692f6f1efdf4fc96ea91832a301e77e9e7d52cd137c9a936b572832442a264253df8f5d47b011e6539e43441a51adb681eca2a5fa02ae3022093b220c891e907c9607cc36668b0370541a69882a455e5c3514ef09c9da62fdba6a794aabaaafbb9ce0380703334d965d7e3367cf69e256275f8e1703e8a32d090e9cf3e8e11cc8ada9a7d40475106fcb88ef3efeb6429f5bb7867aea9c433c88171c57f25aced64f13bea65678299551c48c8985083d490d03c22ed3644b518143e869f4a8a60b6e855b2748a32e0ab0fa6688b67ca6f3981c36e4ce583a2d6e8ac4f70a733e25a4067864d28da48f5f2b93fa92d5933dcb1be2e9b18fd8c5f64c9fd2e48ebcd0c74b0672a27a253618864e78657278943f31e2b6ef83f4f22f8a26291e349a5f2b207fdf55843d767b7a8129b1c914b5652c6d5f565b2acde8a8a6ea7481ad7f9d112fe06e0fc987416e3e0e4fe6ac1f4b9468899c89e0641fee96eaaac7eea5b6d3d6ae921ed80c8606f4aaf63e98a3d8f90d8677d791bca07054ed3a552c136e49fd8f17a89f1830aa75e2e33b54f665567c4dc81c21877419f9d821ef48207e4b0a0d90eecec284223eb04e0759f4048e8dc4e44544aa41fc39d05d6c0f80ef9a8e6f14e9d1cd8706867f7d0b07d83f754d1e846f62e0b464ee98568780927ef458b3bf82578af8a588b015b0b703e05deb5c7d6e366dabc0915f7b07c"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) fcntl$dupfd(r3, 0x0, r3) syz_emit_ethernet(0x26, &(0x7f0000000100)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=@ipv6_delrule={0x88, 0x21, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0x7f, 0x6, 0x0, 0x0, 0x2, 0x10}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xffffffff}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}}, @FRA_DST={0x14, 0x1, @empty}]}, 0x88}}, 0x1) dup(0xffffffffffffffff) 4.334670577s ago: executing program 1 (id=388): io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4000014d, 0x0, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4b}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r6, 0x0, r9}) socket$can_j1939(0x1d, 0x2, 0x7) 2.690390025s ago: executing program 1 (id=389): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x64}}, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1000}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x41}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5195c342}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0xa8}}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r1], 0x20}}, 0x0) 2.205263139s ago: executing program 0 (id=390): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x6, 0x200000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={0x0, r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x7fff, 0x80, 0xfe, 0x3}, {0xa7, 0xe, 0x80}, {0x9, 0x6, 0x5, 0xb}, {0x6, 0x9, 0x3, 0x7}]}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000f800000000000000000000009500000000000008"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000e2000000000000000000006200400000000000aa000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000090000004400038008000300000000001400020076657468315f746f5f7465616d0000000800010001"], 0x58}}, 0x0) 1.800004909s ago: executing program 1 (id=391): syz_open_dev$sg(0x0, 0x7, 0x40042) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @llc={0x1a, 0x1b, 0xb6, 0x8, 0x4, 0x2, @broadcast}, @can, 0x4, 0x0, 0x0, 0x0, 0xab57, 0x0, 0x8, 0x9, 0xff81}) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x800) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x24) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1200, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$UFFDIO_ZEROPAGE(r6, 0xc018aa06, &(0x7f0000000240)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) 346.059393ms ago: executing program 0 (id=392): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d0000000000291dec98850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c82041003d0001000e01030000001f02090400090009001001040000000c000642040004008eff071104007500ffb00e3f03000000000e090300feffa30f08040000021f00"], 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000440), 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) 240.577516ms ago: executing program 1 (id=393): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r0, 0x1) 0s ago: executing program 1 (id=394): io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4000014d, 0x0, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4b}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x80000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r6, 0x0, r9}) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): ][ T2547] bridge_slave_0: left promiscuous mode [ 279.415675][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.492854][ T2547] bridge_slave_1: left allmulticast mode [ 279.525639][ T2547] bridge_slave_1: left promiscuous mode [ 279.555834][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.656927][ T2547] bridge_slave_0: left allmulticast mode [ 279.666529][ T2547] bridge_slave_0: left promiscuous mode [ 279.672317][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.543557][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.597280][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.640967][ T2547] bond0 (unregistering): Released all slaves [ 280.742014][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.828869][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.854771][ T2547] bond0 (unregistering): Released all slaves [ 281.551853][ T2547] hsr_slave_0: left promiscuous mode [ 281.567029][ T2547] hsr_slave_1: left promiscuous mode [ 281.582992][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.593942][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.699605][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 286.199566][ T2547] hsr_slave_0: left promiscuous mode [ 286.237823][ T2547] hsr_slave_1: left promiscuous mode [ 286.255757][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.276615][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.941169][ T29] audit: type=1400 audit(1724404354.815:245): avc: denied { write } for pid=6392 comm="syz.3.179" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.971609][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 286.986157][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.006838][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.016040][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.035641][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.046012][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.053743][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.072179][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.087198][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.095121][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.104143][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.118535][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.145115][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.154738][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 287.335022][ T6399] netlink: 72 bytes leftover after parsing attributes in process `syz.3.180'. [ 288.104017][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 288.193996][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 288.602743][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.112866][ T6410] bridge0: entered allmulticast mode [ 289.285652][ T5232] Bluetooth: hci5: command tx timeout [ 289.557585][ T6410] bridge0: left allmulticast mode [ 290.165530][ T29] audit: type=1326 audit(1724404357.905:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.0.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x0 [ 291.345568][ T5232] Bluetooth: hci5: command tx timeout [ 292.705605][ T5335] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.935558][ T5335] usb 4-1: Using ep0 maxpacket: 8 [ 292.943919][ T5335] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 292.974422][ T5335] usb 4-1: config 0 has no interface number 1 [ 293.003892][ T5335] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.065082][ T5335] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 293.138612][ T5335] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 293.175556][ T5335] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 293.230244][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 293.237198][ T5335] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.290721][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 293.326477][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.375157][ T5335] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 293.404462][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.414426][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.421018][ T5335] usb 4-1: Product: syz [ 293.428459][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.436636][ T5229] Bluetooth: hci5: command tx timeout [ 293.444333][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.449744][ T5335] usb 4-1: Manufacturer: syz [ 293.460446][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.468644][ T5335] usb 4-1: SerialNumber: syz [ 293.474521][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.504682][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.531175][ T5335] usb 4-1: config 0 descriptor?? [ 293.596332][ T6426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.654510][ T5335] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.672544][ T5335] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.873061][ T5335] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 293.966269][ T5335] usb 4-1: USB disconnect, device number 3 [ 294.611137][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.626067][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.633544][ T6394] bridge_slave_0: entered allmulticast mode [ 294.644243][ T6394] bridge_slave_0: entered promiscuous mode [ 294.723934][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.746648][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.760669][ T6394] bridge_slave_1: entered allmulticast mode [ 294.770328][ T6394] bridge_slave_1: entered promiscuous mode [ 295.012977][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.151663][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.505548][ T5232] Bluetooth: hci5: command tx timeout [ 295.701271][ T5232] Bluetooth: hci2: command tx timeout [ 295.965566][ T29] audit: type=1400 audit(1724404363.575:247): avc: denied { create } for pid=6456 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.992740][ T6394] team0: Port device team_slave_0 added [ 297.297603][ T6209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.195846][ T5232] Bluetooth: hci2: command tx timeout [ 298.384041][ T6394] team0: Port device team_slave_1 added [ 298.518406][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.535419][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.594206][ T6472] netlink: 72 bytes leftover after parsing attributes in process `syz.3.190'. [ 298.595507][ T29] audit: type=1400 audit(1724404366.445:248): avc: denied { rename } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.635478][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.675460][ T6209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.691839][ T29] audit: type=1400 audit(1724404366.445:249): avc: denied { unlink } for pid=4652 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.715220][ T29] audit: type=1400 audit(1724404366.445:250): avc: denied { create } for pid=4652 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.721991][ T6209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.777669][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.787076][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.883761][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.946722][ T6209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.256909][ T6394] hsr_slave_0: entered promiscuous mode [ 299.277576][ T6394] hsr_slave_1: entered promiscuous mode [ 299.306300][ T6394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.313950][ T6394] Cannot create hsr debugfs directory [ 299.390780][ T6473] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 299.428169][ T6473] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 300.294747][ T5232] Bluetooth: hci2: command tx timeout [ 300.730726][ T6473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.782039][ T6473] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 301.026113][ T6489] netlink: 72 bytes leftover after parsing attributes in process `syz.3.192'. [ 301.465041][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 301.729510][ T6501] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 302.451539][ T29] audit: type=1400 audit(1724404370.315:251): avc: denied { connect } for pid=6510 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.495682][ T29] audit: type=1400 audit(1724404370.345:252): avc: denied { write } for pid=6510 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.604934][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.834461][ T29] audit: type=1326 audit(1724404370.595:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.0.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x0 [ 302.858016][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.867913][ T6436] bridge_slave_0: entered allmulticast mode [ 302.878636][ T6436] bridge_slave_0: entered promiscuous mode [ 302.889745][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.897470][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.905075][ T6436] bridge_slave_1: entered allmulticast mode [ 302.917931][ T6436] bridge_slave_1: entered promiscuous mode [ 303.602971][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.707990][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.934611][ T6436] team0: Port device team_slave_0 added [ 304.041642][ T6436] team0: Port device team_slave_1 added [ 304.181912][ T6532] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.227944][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.736963][ T6538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.929926][ T2547] bridge_slave_1: left allmulticast mode [ 305.946530][ T2547] bridge_slave_1: left promiscuous mode [ 305.955407][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.978133][ T2547] bridge_slave_0: left allmulticast mode [ 305.983971][ T2547] bridge_slave_0: left promiscuous mode [ 306.010771][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.047909][ T2547] bridge_slave_1: left allmulticast mode [ 306.835396][ T2547] bridge_slave_1: left promiscuous mode [ 306.865858][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.959535][ T2547] bridge_slave_0: left allmulticast mode [ 306.981701][ T2547] bridge_slave_0: left promiscuous mode [ 307.012517][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.174877][ T29] audit: type=1400 audit(1724404375.035:254): avc: denied { accept } for pid=6550 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.237952][ T29] audit: type=1400 audit(1724404375.095:255): avc: denied { setopt } for pid=6550 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.367560][ T6557] capability: warning: `syz.3.202' uses 32-bit capabilities (legacy support in use) [ 307.442139][ T29] audit: type=1400 audit(1724404375.315:256): avc: denied { create } for pid=6550 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 307.447724][ T29] audit: type=1400 audit(1724404375.325:257): avc: denied { create } for pid=6553 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.465373][ T29] audit: type=1400 audit(1724404375.335:258): avc: denied { setopt } for pid=6553 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.505786][ T29] audit: type=1400 audit(1724404375.375:259): avc: denied { bind } for pid=6553 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.505874][ T29] audit: type=1400 audit(1724404375.375:260): avc: denied { name_bind } for pid=6553 comm="syz.0.201" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 307.514539][ T29] audit: type=1400 audit(1724404375.385:261): avc: denied { node_bind } for pid=6553 comm="syz.0.201" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 307.535940][ T29] audit: type=1400 audit(1724404375.405:262): avc: denied { write } for pid=6553 comm="syz.0.201" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.536035][ T29] audit: type=1400 audit(1724404375.405:263): avc: denied { connect } for pid=6553 comm="syz.0.201" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.536119][ T29] audit: type=1400 audit(1724404375.405:264): avc: denied { name_connect } for pid=6553 comm="syz.0.201" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 307.844732][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.001287][ T29] audit: type=1400 audit(1724404375.875:265): avc: denied { ioctl } for pid=6553 comm="syz.0.201" path="/dev/video0" dev="devtmpfs" ino=849 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 308.117877][ T6555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.201'. [ 308.443838][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.486511][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.521621][ T2547] bond0 (unregistering): Released all slaves [ 308.964440][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.998682][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.089362][ T2547] bond0 (unregistering): Released all slaves [ 309.237967][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.276108][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.302034][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.341436][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.430104][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.463985][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.510727][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.881362][ T2547] hsr_slave_0: left promiscuous mode [ 309.905102][ T2547] hsr_slave_1: left promiscuous mode [ 309.914337][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.981646][ T6588] Cannot find set identified by id 0 to match [ 310.776389][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.857140][ T2547] hsr_slave_0: left promiscuous mode [ 310.873455][ T2547] hsr_slave_1: left promiscuous mode [ 310.945588][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.984985][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.174501][ T29] audit: type=1400 audit(1724404379.045:266): avc: denied { mounton } for pid=6595 comm="syz.0.208" path="/proc/302/task" dev="proc" ino=12891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 311.197148][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.226668][ T29] audit: type=1400 audit(1724404380.105:267): avc: denied { bind } for pid=6595 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.032080][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 314.130246][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 314.535065][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 314.580905][ T29] audit: type=1326 audit(1724404382.345:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.3.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x0 [ 315.711601][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 315.785783][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 316.118187][ T6636] Cannot find set identified by id 0 to match [ 317.519295][ T6642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.569800][ T6436] hsr_slave_0: entered promiscuous mode [ 318.619855][ T6436] hsr_slave_1: entered promiscuous mode [ 318.694670][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.715395][ T6436] Cannot create hsr debugfs directory [ 319.166401][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.177691][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.191610][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.208185][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.220369][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.235801][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.251511][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.280565][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.304855][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.317064][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.333037][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.356486][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.130834][ T6665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6665 comm=syz.0.220 [ 320.258533][ T6394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.363417][ T6394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.405226][ T6394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.512952][ T6394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.425739][ T5233] Bluetooth: hci1: command tx timeout [ 322.202431][ T6700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.021597][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.037699][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.505568][ T5233] Bluetooth: hci1: command tx timeout [ 324.604790][ T6436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.696670][ T6436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.752942][ T6436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.873605][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.896671][ T6436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.942143][ T2547] bridge_slave_1: left allmulticast mode [ 324.949890][ T2547] bridge_slave_1: left promiscuous mode [ 324.957408][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.968522][ T2547] bridge_slave_0: left allmulticast mode [ 324.974233][ T2547] bridge_slave_0: left promiscuous mode [ 324.981555][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.602557][ T5233] Bluetooth: hci1: command tx timeout [ 326.999945][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.024078][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.047495][ T2547] bond0 (unregistering): Released all slaves [ 327.082909][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 327.284712][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.764755][ T5233] Bluetooth: hci1: command tx timeout [ 327.773233][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.231'. [ 327.813055][ T2547] hsr_slave_0: left promiscuous mode [ 327.974909][ T6736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.331093][ T2547] hsr_slave_1: left promiscuous mode [ 328.917339][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.946476][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.616589][ T6740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.201281][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 332.280060][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 332.484279][ T29] audit: type=1400 audit(1724404400.355:270): avc: denied { read } for pid=6754 comm="syz.0.236" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 332.528134][ T29] audit: type=1400 audit(1724404400.385:271): avc: denied { open } for pid=6754 comm="syz.0.236" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 333.484306][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.491610][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.639455][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.647633][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.928801][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.953979][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.967141][ T6653] bridge_slave_0: entered allmulticast mode [ 333.986202][ T6653] bridge_slave_0: entered promiscuous mode [ 334.073591][ T29] audit: type=1400 audit(1724404401.915:272): avc: denied { create } for pid=6766 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.226144][ T29] audit: type=1400 audit(1724404402.085:273): avc: denied { connect } for pid=6766 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.333014][ T29] audit: type=1400 audit(1724404402.205:274): avc: denied { write } for pid=6766 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.460931][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.571308][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.595620][ T6653] bridge_slave_1: entered allmulticast mode [ 334.631721][ T6653] bridge_slave_1: entered promiscuous mode [ 334.990696][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.213924][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.571172][ T6653] team0: Port device team_slave_0 added [ 335.740766][ T6653] team0: Port device team_slave_1 added [ 336.344561][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.379659][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.430987][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.609147][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.667753][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.081507][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.381525][ T29] audit: type=1400 audit(1724404405.255:275): avc: denied { sys_module } for pid=6394 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 337.417041][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.622115][ T6653] hsr_slave_0: entered promiscuous mode [ 337.774158][ T6653] hsr_slave_1: entered promiscuous mode [ 337.843035][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.865576][ T6653] Cannot create hsr debugfs directory [ 338.045513][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.333520][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.341855][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.493535][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.500666][ T29] audit: type=1400 audit(1724404407.375:276): avc: denied { bind } for pid=6813 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.520193][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.564174][ T29] audit: type=1400 audit(1724404407.435:277): avc: denied { write } for pid=6813 comm="syz.0.246" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 339.794857][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.399362][ T29] audit: type=1400 audit(1724404408.255:278): avc: denied { ioctl } for pid=6813 comm="syz.0.246" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14579 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.068516][ T6394] veth0_vlan: entered promiscuous mode [ 341.708561][ T6394] veth1_vlan: entered promiscuous mode [ 341.854478][ C1] hrtimer: interrupt took 921984 ns [ 341.985813][ T29] audit: type=1400 audit(1724404409.855:279): avc: denied { read write } for pid=6831 comm="syz.0.247" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.037561][ T29] audit: type=1400 audit(1724404409.865:280): avc: denied { open } for pid=6831 comm="syz.0.247" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.059508][ T6394] veth0_macvtap: entered promiscuous mode [ 342.135597][ T29] audit: type=1400 audit(1724404409.865:281): avc: denied { ioctl } for pid=6831 comm="syz.0.247" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.244389][ T6394] veth1_macvtap: entered promiscuous mode [ 342.289024][ T5335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 342.426248][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.458581][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.476187][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.492491][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.508326][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.516300][ T5335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.532665][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.540984][ T5335] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 342.542071][ T6653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.583469][ T5335] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.597282][ T6653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.626535][ T5335] usb 1-1: config 1 interface 1 has no altsetting 0 [ 342.655934][ T5335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.675546][ T5335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.691254][ T5335] usb 1-1: Product: syz [ 342.696168][ T5335] usb 1-1: Manufacturer: syz [ 342.715663][ T5335] usb 1-1: SerialNumber: syz [ 342.723069][ T6653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.774477][ T6653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.856685][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.872459][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.886118][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.898698][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.920688][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.944938][ T6394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.995554][ T6394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.048851][ T6394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.065860][ T5335] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.122552][ T6394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.132715][ T5335] usb 1-1: MIDIStreaming interface descriptor not found [ 343.447046][ T5335] usb 1-1: USB disconnect, device number 5 [ 343.592910][ T6391] udevd[6391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.634364][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.666824][ T6841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 344.186634][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.235836][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.482614][ T6436] veth0_vlan: entered promiscuous mode [ 344.566921][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.574883][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.603686][ T6436] veth1_vlan: entered promiscuous mode [ 345.157197][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 346.525728][ T29] audit: type=1400 audit(1724404414.315:282): avc: denied { mount } for pid=6394 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 348.657687][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.975884][ T6436] veth0_macvtap: entered promiscuous mode [ 349.041111][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.091013][ T6436] veth1_macvtap: entered promiscuous mode [ 349.194403][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.201701][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.418417][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.425738][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.524809][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.585922][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.620451][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.681519][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.717225][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.771718][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.808001][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.277918][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.361523][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.400666][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.435744][ T6874] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 352.455459][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.483629][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.515173][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.583226][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.847433][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.859764][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.869336][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.880591][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.896078][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 352.905920][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.811743][ T6141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.026924][ T5232] Bluetooth: hci3: command tx timeout [ 355.116602][ T6141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.215980][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.228107][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.256163][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.285918][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.297257][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.304963][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.572424][ T6141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.821196][ T6904] Cannot find set identified by id 0 to match [ 357.169128][ T5233] Bluetooth: hci3: command tx timeout [ 357.693386][ T6141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.385641][ T5233] Bluetooth: hci2: command tx timeout [ 358.866416][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.024993][ T6141] bridge_slave_1: left allmulticast mode [ 359.040633][ T6141] bridge_slave_1: left promiscuous mode [ 359.119793][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.232436][ T5233] Bluetooth: hci3: command tx timeout [ 359.471543][ T6141] bridge_slave_0: left allmulticast mode [ 359.478110][ T6141] bridge_slave_0: left promiscuous mode [ 359.704419][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.400198][ T6919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.465485][ T5233] Bluetooth: hci2: command tx timeout [ 361.348725][ T5233] Bluetooth: hci3: command tx timeout [ 361.863032][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.891935][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.924716][ T6141] bond0 (unregistering): Released all slaves [ 362.492906][ T29] audit: type=1400 audit(1724404430.365:283): avc: denied { create } for pid=6929 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.523071][ T29] audit: type=1400 audit(1724404430.375:284): avc: denied { bind } for pid=6929 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.547226][ T5233] Bluetooth: hci2: command tx timeout [ 362.572626][ T29] audit: type=1400 audit(1724404430.375:285): avc: denied { accept } for pid=6929 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.948502][ T6934] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.038888][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 363.707462][ T6141] hsr_slave_0: left promiscuous mode [ 363.719460][ T6141] hsr_slave_1: left promiscuous mode [ 363.735023][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.743708][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.776543][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.803458][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.909074][ T6141] veth1_macvtap: left promiscuous mode [ 363.935834][ T6141] veth0_macvtap: left promiscuous mode [ 363.941728][ T6141] veth1_vlan: left promiscuous mode [ 363.948749][ T6141] veth0_vlan: left promiscuous mode [ 364.660457][ T5233] Bluetooth: hci2: command tx timeout [ 365.402807][ T29] audit: type=1400 audit(1724404433.275:286): avc: denied { setopt } for pid=6942 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.523539][ T29] audit: type=1400 audit(1724404433.395:287): avc: denied { write } for pid=6942 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.622597][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 366.676702][ T29] audit: type=1326 audit(1724404434.555:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x0 [ 366.754837][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 366.799875][ T29] audit: type=1400 audit(1724404434.675:289): avc: denied { read } for pid=6954 comm="syz.0.271" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.854428][ T29] audit: type=1400 audit(1724404434.675:290): avc: denied { open } for pid=6954 comm="syz.0.271" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 366.907598][ T29] audit: type=1400 audit(1724404434.735:291): avc: denied { ioctl } for pid=6954 comm="syz.0.271" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 367.631631][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 367.688568][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.359610][ T6967] Cannot find set identified by id 0 to match [ 368.799938][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.834465][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.872512][ T6879] bridge_slave_0: entered allmulticast mode [ 368.913615][ T6879] bridge_slave_0: entered promiscuous mode [ 368.960016][ T6653] veth0_vlan: entered promiscuous mode [ 369.424276][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.452619][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.477241][ T6893] bridge_slave_0: entered allmulticast mode [ 369.501608][ T6893] bridge_slave_0: entered promiscuous mode [ 369.528003][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.536367][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.543697][ T6879] bridge_slave_1: entered allmulticast mode [ 369.562542][ T6879] bridge_slave_1: entered promiscuous mode [ 369.593769][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.603615][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.612983][ T6893] bridge_slave_1: entered allmulticast mode [ 369.642874][ T6893] bridge_slave_1: entered promiscuous mode [ 370.358571][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.391018][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.412922][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.456083][ T943] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 370.498330][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 374.525794][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 374.619877][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.634913][ T943] usb 1-1: device descriptor read/all, error -71 [ 374.811294][ T6653] veth1_vlan: entered promiscuous mode [ 375.360744][ T6989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.831088][ T6893] team0: Port device team_slave_0 added [ 376.366342][ T6879] team0: Port device team_slave_0 added [ 376.390475][ T6893] team0: Port device team_slave_1 added [ 376.520997][ T6879] team0: Port device team_slave_1 added [ 376.572640][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 376.593329][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 376.638606][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'. [ 376.857964][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.864969][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.921762][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.158410][ T6995] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 377.330898][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.386094][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.535493][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.608115][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.628712][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.815694][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.908213][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.948554][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.973371][ T29] audit: type=1326 audit(1724404445.825:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.090844][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.104128][ T29] audit: type=1326 audit(1724404445.825:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.225548][ T29] audit: type=1326 audit(1724404445.915:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.345731][ T29] audit: type=1326 audit(1724404445.915:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.418020][ T29] audit: type=1326 audit(1724404445.915:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.489991][ T29] audit: type=1326 audit(1724404445.915:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.643982][ T29] audit: type=1326 audit(1724404445.925:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.730500][ T29] audit: type=1326 audit(1724404445.925:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.813241][ T29] audit: type=1326 audit(1724404445.935:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.871995][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.875372][ T29] audit: type=1326 audit(1724404445.935:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 378.908221][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.939209][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.952069][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.962803][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 378.975723][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.090744][ T6893] hsr_slave_0: entered promiscuous mode [ 379.135968][ T6893] hsr_slave_1: entered promiscuous mode [ 379.155603][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.163260][ T6893] Cannot create hsr debugfs directory [ 379.550407][ T6879] hsr_slave_0: entered promiscuous mode [ 379.568684][ T6879] hsr_slave_1: entered promiscuous mode [ 379.589626][ T6879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.605404][ T6879] Cannot create hsr debugfs directory [ 380.440506][ T7015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.105675][ T5233] Bluetooth: hci1: command tx timeout [ 381.646184][ T7021] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 381.730993][ T6141] bridge_slave_1: left allmulticast mode [ 381.744906][ T6141] bridge_slave_1: left promiscuous mode [ 381.754712][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.768589][ T6141] bridge_slave_0: left allmulticast mode [ 381.774430][ T6141] bridge_slave_0: left promiscuous mode [ 381.783326][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.816495][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.843182][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.882793][ T6141] bond0 (unregistering): Released all slaves [ 383.186091][ T5233] Bluetooth: hci1: command tx timeout [ 384.377050][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.383432][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.570574][ T6141] hsr_slave_0: left promiscuous mode [ 384.598432][ T6141] hsr_slave_1: left promiscuous mode [ 384.637561][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.657474][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.676425][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.683889][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.795449][ T6141] veth1_macvtap: left promiscuous mode [ 384.801255][ T6141] veth0_macvtap: left promiscuous mode [ 384.826669][ T6141] veth1_vlan: left promiscuous mode [ 384.835635][ T6141] veth0_vlan: left promiscuous mode [ 385.102760][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 385.126236][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 385.165747][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 385.265718][ T5233] Bluetooth: hci1: command tx timeout [ 387.416240][ T5233] Bluetooth: hci1: command tx timeout [ 388.283851][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 388.364353][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 390.337635][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 390.361002][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 390.361024][ T29] audit: type=1326 audit(1724404458.235:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.0.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x0 [ 391.434701][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.456671][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.463998][ T7006] bridge_slave_0: entered allmulticast mode [ 391.500024][ T7006] bridge_slave_0: entered promiscuous mode [ 391.715187][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.764107][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.793661][ T7006] bridge_slave_1: entered allmulticast mode [ 391.830587][ T7006] bridge_slave_1: entered promiscuous mode [ 392.382602][ T29] audit: type=1400 audit(1724404460.205:320): avc: denied { setopt } for pid=7099 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.510566][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.549835][ T7104] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 392.601038][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.255110][ T7006] team0: Port device team_slave_0 added [ 393.308170][ T7006] team0: Port device team_slave_1 added [ 393.517012][ T6893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.606468][ T6893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.692608][ T6893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.754143][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.774200][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.824429][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 393.853366][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.886885][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 393.995756][ T6893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 394.020770][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.038846][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.093880][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.916079][ T29] audit: type=1326 audit(1724404462.665:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.591834][ T29] audit: type=1326 audit(1724404462.665:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.626585][ T29] audit: type=1326 audit(1724404462.665:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.667249][ T29] audit: type=1326 audit(1724404462.665:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.725881][ T29] audit: type=1326 audit(1724404462.665:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.754029][ T29] audit: type=1326 audit(1724404462.675:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.784898][ T29] audit: type=1326 audit(1724404462.675:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.819427][ T6141] bridge_slave_1: left allmulticast mode [ 395.825176][ T6141] bridge_slave_1: left promiscuous mode [ 395.855884][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.873457][ T29] audit: type=1326 audit(1724404462.675:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 395.915518][ T6141] bridge_slave_0: left allmulticast mode [ 395.922043][ T6141] bridge_slave_0: left promiscuous mode [ 395.924688][ T29] audit: type=1326 audit(1724404462.675:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 396.274798][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.333889][ T29] audit: type=1326 audit(1724404462.675:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 396.367000][ T29] audit: type=1326 audit(1724404462.685:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ef79e79 code=0x7ffc0000 [ 397.538821][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 398.547767][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.592493][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.608918][ T6141] bond0 (unregistering): Released all slaves [ 398.721402][ T7006] hsr_slave_0: entered promiscuous mode [ 398.734556][ T7006] hsr_slave_1: entered promiscuous mode [ 398.750148][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.759402][ T7006] Cannot create hsr debugfs directory [ 398.877806][ T6879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.915814][ T6141] hsr_slave_0: left promiscuous mode [ 398.923664][ T6141] hsr_slave_1: left promiscuous mode [ 398.962449][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.995768][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.068735][ T6141] veth1_vlan: left promiscuous mode [ 399.074215][ T6141] veth0_vlan: left promiscuous mode [ 403.482697][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 403.598665][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 403.866094][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 403.866116][ T29] audit: type=1326 audit(1724404471.715:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 403.955171][ T29] audit: type=1326 audit(1724404471.715:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.055088][ T29] audit: type=1326 audit(1724404471.715:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.081440][ T29] audit: type=1326 audit(1724404471.715:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.107894][ T29] audit: type=1326 audit(1724404471.715:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.135451][ T29] audit: type=1326 audit(1724404471.715:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.332323][ T29] audit: type=1326 audit(1724404471.715:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.447566][ T29] audit: type=1326 audit(1724404471.715:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.530822][ T29] audit: type=1326 audit(1724404471.725:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 404.637889][ T29] audit: type=1326 audit(1724404471.725:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8648779e79 code=0x7ffc0000 [ 405.010084][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 405.020357][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 405.155038][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 405.225833][ T6879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.381581][ T6879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.115621][ T7166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.648296][ T6879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.196634][ T7185] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 409.554561][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.101968][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.319024][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.327287][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.407089][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.414817][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.376327][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.460002][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.474554][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.525798][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.572919][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.633941][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.814543][ T6893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.759605][ T7212] bridge0: entered allmulticast mode [ 414.065632][ T5232] Bluetooth: hci3: command tx timeout [ 414.182693][ T7006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 414.277861][ T7212] bridge0: left allmulticast mode [ 414.290996][ T7006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 414.898658][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.911301][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.922268][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.934592][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.949244][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.979151][ T7006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 414.993298][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.257502][ T5232] Bluetooth: hci3: command tx timeout [ 416.303513][ T7006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.735515][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 416.735563][ T29] audit: type=1400 audit(1724404484.595:389): avc: denied { read } for pid=7231 comm="syz.3.324" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 417.455608][ T540] bridge_slave_1: left allmulticast mode [ 417.471999][ T540] bridge_slave_1: left promiscuous mode [ 417.486818][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.517885][ T540] bridge_slave_0: left allmulticast mode [ 417.523600][ T540] bridge_slave_0: left promiscuous mode [ 417.575634][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.149350][ T540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.180604][ T540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.220867][ T540] bond0 (unregistering): Released all slaves [ 418.305656][ T5232] Bluetooth: hci3: command tx timeout [ 418.385794][ T5232] Bluetooth: hci2: command tx timeout [ 418.526146][ T540] hsr_slave_0: left promiscuous mode [ 418.557053][ T540] hsr_slave_1: left promiscuous mode [ 418.563767][ T540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.582995][ T540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.390751][ T540] team0 (unregistering): Port device team_slave_1 removed [ 419.450347][ T540] team0 (unregistering): Port device team_slave_0 removed [ 420.400289][ T5232] Bluetooth: hci3: command tx timeout [ 420.466190][ T5232] Bluetooth: hci2: command tx timeout [ 421.251659][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 421.463915][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.774338][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 421.864527][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.171193][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.193148][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.215671][ T7196] bridge_slave_0: entered allmulticast mode [ 422.224166][ T7196] bridge_slave_0: entered promiscuous mode [ 422.277869][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.285212][ T5406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.535849][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.544085][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.556338][ T5232] Bluetooth: hci2: command tx timeout [ 422.569603][ T7196] bridge_slave_1: entered allmulticast mode [ 422.645680][ T7196] bridge_slave_1: entered promiscuous mode [ 422.769986][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.777323][ T5406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.374447][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.640720][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.730766][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.755987][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.796013][ T7220] bridge_slave_0: entered allmulticast mode [ 423.855515][ T7220] bridge_slave_0: entered promiscuous mode [ 423.898005][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.935571][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.942928][ T7220] bridge_slave_1: entered allmulticast mode [ 423.965514][ T7220] bridge_slave_1: entered promiscuous mode [ 424.361901][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.424981][ T7196] team0: Port device team_slave_0 added [ 424.452303][ T7196] team0: Port device team_slave_1 added [ 424.474804][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.625567][ T5232] Bluetooth: hci2: command tx timeout [ 424.982755][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.026031][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.068223][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.233952][ T7220] team0: Port device team_slave_0 added [ 425.320931][ T7220] team0: Port device team_slave_1 added [ 425.358354][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.398719][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.503987][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.086648][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.125433][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.235491][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.271006][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.305614][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.435429][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.724104][ T540] bridge_slave_1: left allmulticast mode [ 426.731236][ T540] bridge_slave_1: left promiscuous mode [ 426.776206][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.850479][ T540] bridge_slave_0: left allmulticast mode [ 426.897199][ T540] bridge_slave_0: left promiscuous mode [ 426.904118][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.256837][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.292954][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.336005][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.351272][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.375789][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 427.385987][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.522648][ T540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.562279][ T540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.688558][ T540] bond0 (unregistering): Released all slaves [ 428.908072][ T7196] hsr_slave_0: entered promiscuous mode [ 428.965043][ T7196] hsr_slave_1: entered promiscuous mode [ 429.000223][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.025735][ T7196] Cannot create hsr debugfs directory [ 429.043942][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.067513][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.076511][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.097114][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.108102][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 429.125916][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.418929][ T540] hsr_slave_0: left promiscuous mode [ 429.451198][ T540] hsr_slave_1: left promiscuous mode [ 429.477222][ T540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.497190][ T540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.506270][ T5233] Bluetooth: hci5: command tx timeout [ 430.649130][ T540] team0 (unregistering): Port device team_slave_1 removed [ 430.747809][ T540] team0 (unregistering): Port device team_slave_0 removed [ 431.265726][ T5233] Bluetooth: hci6: command tx timeout [ 431.595395][ T5233] Bluetooth: hci5: command tx timeout [ 432.489498][ T7220] hsr_slave_0: entered promiscuous mode [ 432.553453][ T7220] hsr_slave_1: entered promiscuous mode [ 432.595664][ T7220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.604143][ T7220] Cannot create hsr debugfs directory [ 433.345898][ T5233] Bluetooth: hci6: command tx timeout [ 433.666211][ T5233] Bluetooth: hci5: command tx timeout [ 434.289262][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.284311][ T540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.426920][ T5233] Bluetooth: hci6: command tx timeout [ 435.746493][ T5233] Bluetooth: hci5: command tx timeout [ 435.858725][ T540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.011421][ T540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.452046][ T540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.509789][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 436.738341][ T7006] veth0_vlan: entered promiscuous mode [ 437.003542][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 437.505575][ T5233] Bluetooth: hci6: command tx timeout [ 437.556851][ T7006] veth1_vlan: entered promiscuous mode [ 438.081491][ T540] bridge_slave_1: left allmulticast mode [ 438.095314][ T540] bridge_slave_1: left promiscuous mode [ 438.101313][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.139247][ T540] bridge_slave_0: left allmulticast mode [ 438.166293][ T540] bridge_slave_0: left promiscuous mode [ 438.176010][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.946375][ T540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.972790][ T540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.030296][ T540] bond0 (unregistering): Released all slaves [ 440.040813][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.052237][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.062443][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.086055][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.101648][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 440.110049][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.110498][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.118196][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.138456][ T7279] bridge_slave_0: entered allmulticast mode [ 440.205813][ T7279] bridge_slave_0: entered promiscuous mode [ 440.318220][ T7196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.677396][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.708765][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.735693][ T7279] bridge_slave_1: entered allmulticast mode [ 440.765407][ T7279] bridge_slave_1: entered promiscuous mode [ 441.095923][ T7196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.137988][ T7196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.532864][ T7196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 441.819202][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.870962][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.237016][ T5233] Bluetooth: hci0: command tx timeout [ 442.523577][ T7279] team0: Port device team_slave_0 added [ 442.558863][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.567570][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.605650][ T7283] bridge_slave_0: entered allmulticast mode [ 442.636753][ T7283] bridge_slave_0: entered promiscuous mode [ 442.689542][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.701120][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.726434][ T7283] bridge_slave_1: entered allmulticast mode [ 442.791194][ T7283] bridge_slave_1: entered promiscuous mode [ 442.986713][ T7279] team0: Port device team_slave_1 added [ 443.420538][ T540] hsr_slave_0: left promiscuous mode [ 443.447268][ T540] hsr_slave_1: left promiscuous mode [ 443.454015][ T540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.495886][ T540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.503356][ T540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.644084][ T540] veth1_macvtap: left promiscuous mode [ 443.685511][ T540] veth0_macvtap: left promiscuous mode [ 443.691369][ T540] veth1_vlan: left promiscuous mode [ 443.715693][ T540] veth0_vlan: left promiscuous mode [ 444.306072][ T5233] Bluetooth: hci0: command tx timeout [ 445.266931][ T540] team0 (unregistering): Port device team_slave_1 removed [ 445.376386][ T540] team0 (unregistering): Port device team_slave_0 removed [ 445.751895][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.758424][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.388499][ T5233] Bluetooth: hci0: command tx timeout [ 446.898599][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.915684][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.975989][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.019098][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.035480][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.115484][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.148539][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.289405][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.817664][ T7279] hsr_slave_0: entered promiscuous mode [ 447.838736][ T7279] hsr_slave_1: entered promiscuous mode [ 447.907181][ T7283] team0: Port device team_slave_0 added [ 447.934189][ T7283] team0: Port device team_slave_1 added [ 448.318021][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.325024][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.353139][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.408804][ T7220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.465978][ T5233] Bluetooth: hci0: command tx timeout [ 448.524311][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.545911][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.575700][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.675499][ T7220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.698860][ T7220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.725975][ T7220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.293396][ T7283] hsr_slave_0: entered promiscuous mode [ 449.335834][ T7283] hsr_slave_1: entered promiscuous mode [ 449.361749][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.385317][ T7283] Cannot create hsr debugfs directory [ 450.915113][ T7279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.961496][ T7342] chnl_net:caif_netlink_parms(): no params data found [ 451.398998][ T7279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.991521][ T7279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.214977][ T7279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.312490][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.421931][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.437729][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.457511][ T7342] bridge_slave_0: entered allmulticast mode [ 452.486178][ T7342] bridge_slave_0: entered promiscuous mode [ 452.514527][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.537925][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.555886][ T7342] bridge_slave_1: entered allmulticast mode [ 452.585387][ T7342] bridge_slave_1: entered promiscuous mode [ 453.169604][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.234429][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.332376][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.522238][ T540] bridge_slave_1: left allmulticast mode [ 453.531203][ T540] bridge_slave_1: left promiscuous mode [ 453.546018][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.601918][ T540] bridge_slave_0: left allmulticast mode [ 453.615691][ T540] bridge_slave_0: left promiscuous mode [ 453.622496][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.166187][ T540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.201115][ T540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.230666][ T540] bond0 (unregistering): Released all slaves [ 455.537459][ T7342] team0: Port device team_slave_0 added [ 455.587492][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.594796][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.645640][ T540] hsr_slave_0: left promiscuous mode [ 455.660336][ T540] hsr_slave_1: left promiscuous mode [ 455.688409][ T540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.709283][ T540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.800899][ T540] veth1_vlan: left promiscuous mode [ 455.806449][ T540] veth0_vlan: left promiscuous mode [ 457.244923][ T540] team0 (unregistering): Port device team_slave_1 removed [ 457.436049][ T540] team0 (unregistering): Port device team_slave_0 removed [ 458.649087][ T7342] team0: Port device team_slave_1 added [ 458.886362][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.894127][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.946896][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.953961][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.985381][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.009139][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.025499][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.052024][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.535175][ T7342] hsr_slave_0: entered promiscuous mode [ 459.549332][ T7342] hsr_slave_1: entered promiscuous mode [ 459.575806][ T7342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.587079][ T7342] Cannot create hsr debugfs directory [ 459.859742][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.867268][ T7279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.135101][ T7279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.346733][ T7279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.380808][ T7279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.667646][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.874458][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.882657][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.399128][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.407401][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.222140][ T7283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.509939][ T7283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.575903][ T7283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.704037][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.763746][ T7283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.366969][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.488042][ T7196] veth0_vlan: entered promiscuous mode [ 464.509884][ T7342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.656993][ T7342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.743032][ T7342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.851927][ T7196] veth1_vlan: entered promiscuous mode [ 464.894155][ T7342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.947647][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.063619][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.232995][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.299179][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.306500][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.348783][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.356102][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.491035][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.786322][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.793606][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.942618][ T7196] veth0_macvtap: entered promiscuous mode [ 466.021583][ T7196] veth1_macvtap: entered promiscuous mode [ 466.073242][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.080806][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.392708][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.415274][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.433569][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.527156][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.567646][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.608440][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.692440][ T7196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.732695][ T7196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.754589][ T7196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.795424][ T7196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.843453][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.922725][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.019207][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.069689][ T7220] veth0_vlan: entered promiscuous mode [ 468.276078][ T7342] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.420772][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.435791][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.446347][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.480473][ T7220] veth1_vlan: entered promiscuous mode [ 468.632536][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.640632][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.834279][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.841577][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.193762][ T7220] veth0_macvtap: entered promiscuous mode [ 469.244780][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.423515][ T7220] veth1_macvtap: entered promiscuous mode [ 469.755764][ T7279] veth0_vlan: entered promiscuous mode [ 469.950091][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.975363][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.005526][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.035941][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.050829][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.148468][ T7279] veth1_vlan: entered promiscuous mode [ 470.318549][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.389184][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.455369][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.495355][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.548973][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.636751][ T7220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.689397][ T7220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.725433][ T7220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.735039][ T7220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.144856][ T7283] veth0_vlan: entered promiscuous mode [ 471.196089][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.209185][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.223006][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.232277][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.256499][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 471.264273][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.559571][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.926632][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.053854][ T7283] veth1_vlan: entered promiscuous mode [ 472.185755][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.412819][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.650547][ T7279] veth0_macvtap: entered promiscuous mode [ 472.978109][ T5406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.987211][ T7279] veth1_macvtap: entered promiscuous mode [ 473.028125][ T5406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.082673][ T7283] veth0_macvtap: entered promiscuous mode [ 473.234733][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.282043][ T7283] veth1_macvtap: entered promiscuous mode [ 473.346354][ T5232] Bluetooth: hci1: command tx timeout [ 474.009445][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.087651][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.114878][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.155097][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.179852][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.201020][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.223850][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.424795][ T35] bridge_slave_1: left allmulticast mode [ 474.431664][ T35] bridge_slave_1: left promiscuous mode [ 474.462200][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.511797][ T35] bridge_slave_0: left allmulticast mode [ 474.529616][ T35] bridge_slave_0: left promiscuous mode [ 474.548673][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.425976][ T5232] Bluetooth: hci1: command tx timeout [ 475.454177][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.466183][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.474988][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.500893][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.527489][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 475.547739][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.649993][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.664801][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.680419][ T35] bond0 (unregistering): Released all slaves [ 475.721733][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.733176][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.744399][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.762500][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.773298][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.784664][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.794900][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.806961][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.821631][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.997782][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.009525][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.022519][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.033124][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.044798][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.055348][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.068411][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.195298][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.207513][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.226396][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.238852][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.253103][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.268205][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.279047][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.289997][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.302950][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.360601][ T7279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.387990][ T7279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.403536][ T7279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.415593][ T7279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.449990][ T7283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.462457][ T7283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.474900][ T7283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.484742][ T7283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.637885][ T7501] chnl_net:caif_netlink_parms(): no params data found [ 476.691875][ T7342] veth0_vlan: entered promiscuous mode [ 476.874105][ T35] hsr_slave_0: left promiscuous mode [ 476.883002][ T35] hsr_slave_1: left promiscuous mode [ 476.891180][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.899592][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.911609][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.921259][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.956499][ T35] veth1_macvtap: left promiscuous mode [ 476.962153][ T35] veth0_macvtap: left promiscuous mode [ 476.968276][ T35] veth1_vlan: left promiscuous mode [ 476.973727][ T35] veth0_vlan: left promiscuous mode [ 477.509903][ T5232] Bluetooth: hci1: command tx timeout [ 477.591122][ T5232] Bluetooth: hci2: command tx timeout [ 477.819076][ T35] team0 (unregistering): Port device team_slave_1 removed [ 477.882752][ T35] team0 (unregistering): Port device team_slave_0 removed [ 478.549968][ T7342] veth1_vlan: entered promiscuous mode [ 479.124056][ T540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.133025][ T540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.249672][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.284719][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.301988][ T7501] bridge_slave_0: entered allmulticast mode [ 479.313925][ T7501] bridge_slave_0: entered promiscuous mode [ 479.386231][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.393500][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.419596][ T7501] bridge_slave_1: entered allmulticast mode [ 479.431419][ T7501] bridge_slave_1: entered promiscuous mode [ 479.587116][ T5232] Bluetooth: hci1: command tx timeout [ 479.636233][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.669196][ T5232] Bluetooth: hci2: command tx timeout [ 479.802100][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.842715][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.876992][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.918549][ T7342] veth0_macvtap: entered promiscuous mode [ 480.056183][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.154465][ T7342] veth1_macvtap: entered promiscuous mode [ 480.200672][ T7501] team0: Port device team_slave_0 added [ 480.233851][ T7501] team0: Port device team_slave_1 added [ 480.297513][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.370444][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.422392][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.453433][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 480.778357][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.266051][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.285341][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.307157][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.318663][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.338375][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.365589][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.385007][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.405481][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.419060][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.498805][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.536951][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.543956][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.592025][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.694261][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.714451][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.725184][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.745809][ T5232] Bluetooth: hci2: command tx timeout [ 481.753958][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.786661][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.810182][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.825500][ T7342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.841504][ T7342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.859004][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.896041][ T5406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.904831][ T5406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.067599][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.110598][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.176306][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.596965][ T7342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.609532][ T7342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.618500][ T7342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.628170][ T7342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.825797][ T5232] Bluetooth: hci2: command tx timeout [ 483.930611][ T7501] hsr_slave_0: entered promiscuous mode [ 483.961020][ T7501] hsr_slave_1: entered promiscuous mode [ 484.023615][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.045825][ T7501] Cannot create hsr debugfs directory [ 484.114389][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.122505][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.131552][ T7523] bridge_slave_0: entered allmulticast mode [ 484.150790][ T7523] bridge_slave_0: entered promiscuous mode [ 486.383297][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.425668][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.434087][ T7523] bridge_slave_1: entered allmulticast mode [ 486.456758][ T7523] bridge_slave_1: entered promiscuous mode [ 487.006172][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.070580][ T35] bridge_slave_1: left allmulticast mode [ 487.080785][ T35] bridge_slave_1: left promiscuous mode [ 487.125437][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.180586][ T35] bridge_slave_0: left allmulticast mode [ 487.187224][ T35] bridge_slave_0: left promiscuous mode [ 487.193104][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.497794][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.552138][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.589107][ T35] bond0 (unregistering): Released all slaves [ 488.659231][ T7603] Process accounting resumed [ 488.770962][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.365886][ T7523] team0: Port device team_slave_0 added [ 489.386671][ T7523] team0: Port device team_slave_1 added [ 491.932311][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.960399][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.991658][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.045778][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.394289][ T2547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.402328][ T2547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.426310][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.433314][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.480454][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.553282][ T35] hsr_slave_0: left promiscuous mode [ 492.562482][ T35] hsr_slave_1: left promiscuous mode [ 492.582566][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.602453][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.614392][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.632888][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.697212][ T35] veth1_macvtap: left promiscuous mode [ 492.713091][ T35] veth0_macvtap: left promiscuous mode [ 492.721888][ T35] veth1_vlan: left promiscuous mode [ 492.733267][ T35] veth0_vlan: left promiscuous mode [ 493.032769][ T7614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.750781][ T5233] Bluetooth: hci5: ISO packet for unknown connection handle 2097 [ 494.876324][ T35] team0 (unregistering): Port device team_slave_1 removed [ 494.903837][ T7618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.338'. [ 494.998563][ T35] team0 (unregistering): Port device team_slave_0 removed [ 496.218401][ T7523] hsr_slave_0: entered promiscuous mode [ 496.226072][ T5233] Bluetooth: hci5: command tx timeout [ 496.250953][ T7523] hsr_slave_1: entered promiscuous mode [ 496.283289][ T7523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.295617][ T7523] Cannot create hsr debugfs directory [ 496.709336][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.787317][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.040060][ T7657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.249678][ T7661] Process accounting resumed [ 502.437791][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.499516][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.515913][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.526127][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.546021][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 502.559443][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.705551][ T5232] Bluetooth: hci3: command tx timeout [ 506.611714][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.785778][ T5232] Bluetooth: hci3: command tx timeout [ 506.938783][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.043299][ T7501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.256174][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.262595][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.538639][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.609940][ T7501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.763816][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.969348][ T7501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.044251][ T7501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.086285][ T5232] Bluetooth: hci3: command tx timeout [ 510.458182][ T35] bridge_slave_1: left allmulticast mode [ 510.463898][ T35] bridge_slave_1: left promiscuous mode [ 510.478847][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.503485][ T35] bridge_slave_0: left allmulticast mode [ 510.529612][ T35] bridge_slave_0: left promiscuous mode [ 510.564027][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.807476][ T5232] Bluetooth: hci0: ISO packet for unknown connection handle 2097 [ 510.863009][ T7707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'. [ 511.105540][ T5232] Bluetooth: hci3: command tx timeout [ 511.857577][ T29] audit: type=1400 audit(1724404579.725:390): avc: denied { ioctl } for pid=7715 comm="syz.1.355" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 512.027270][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.054623][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.089231][ T35] bond0 (unregistering): Released all slaves [ 512.135615][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 512.305754][ T5232] Bluetooth: hci0: command tx timeout [ 512.367506][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.405044][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.513634][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.523933][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.552169][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.574302][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.615347][ T9] usb 2-1: Product: syz [ 512.619600][ T9] usb 2-1: Manufacturer: syz [ 512.711172][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 512.748127][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 512.827136][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 512.846356][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 513.030343][ T7660] chnl_net:caif_netlink_parms(): no params data found [ 513.076858][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 513.079380][ T5333] usb 2-1: USB disconnect, device number 2 [ 513.083758][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 513.083788][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 513.515538][ T35] hsr_slave_0: left promiscuous mode [ 513.522274][ T35] hsr_slave_1: left promiscuous mode [ 513.543095][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.554128][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.583546][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.602655][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.668250][ T35] veth1_macvtap: left promiscuous mode [ 513.682599][ T35] veth0_macvtap: left promiscuous mode [ 513.692063][ T35] veth1_vlan: left promiscuous mode [ 513.702595][ T35] veth0_vlan: left promiscuous mode [ 514.160049][ T7725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.710176][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 515.717751][ T5232] Bluetooth: Wrong link type (-22) [ 515.723849][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 515.731278][ T5232] Bluetooth: Wrong link type (-22) [ 515.738564][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 515.747716][ T5232] Bluetooth: Wrong link type (-22) [ 515.753681][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 515.780739][ T5232] Bluetooth: Wrong link type (-22) [ 515.793182][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 515.800738][ T5232] Bluetooth: Wrong link type (-22) [ 515.807159][ T5232] Bluetooth: hci5: link tx timeout [ 515.813387][ T5232] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.512010][ T7738] Cannot find set identified by id 0 to match [ 518.047454][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 518.072294][ T35] team0 (unregistering): Port device team_slave_1 removed [ 518.181011][ T35] team0 (unregistering): Port device team_slave_0 removed [ 519.451858][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.498353][ T7523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 519.547909][ T7523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.849362][ T7523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.700377][ T7523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.006861][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.038228][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.056457][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.064595][ T7660] bridge_slave_0: entered allmulticast mode [ 521.087845][ T7660] bridge_slave_0: entered promiscuous mode [ 521.101069][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.111183][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.121038][ T7660] bridge_slave_1: entered allmulticast mode [ 521.137860][ T7660] bridge_slave_1: entered promiscuous mode [ 521.348233][ T7757] Process accounting resumed [ 521.487008][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.494836][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.533733][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 521.549175][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.556496][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.579625][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 521.652771][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.716259][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.811436][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 522.061769][ T7760] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 522.178474][ T7660] team0: Port device team_slave_0 added [ 522.190707][ T7660] team0: Port device team_slave_1 added [ 522.507102][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.535673][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.697852][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.772700][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.792461][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.876201][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.136821][ T7766] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 523.714723][ T7660] hsr_slave_0: entered promiscuous mode [ 523.770974][ T7660] hsr_slave_1: entered promiscuous mode [ 523.811960][ T7660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.838868][ T7660] Cannot create hsr debugfs directory [ 523.998049][ T7501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.535124][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 525.547252][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.555699][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 526.042940][ T7523] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.380289][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.388548][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.454695][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.678085][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.685910][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.949108][ T5233] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 529.269486][ T7501] veth0_vlan: entered promiscuous mode [ 529.402402][ T5232] Bluetooth: hci0: ISO packet for unknown connection handle 2097 [ 529.504667][ T7501] veth1_vlan: entered promiscuous mode [ 529.560988][ T7794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.374'. [ 529.941556][ T7660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.012286][ T7660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.121776][ T7660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.230640][ T7660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.890120][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.030442][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.202240][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.498895][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.506248][ T5406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.627280][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.635538][ T5406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.807573][ T7820] Cannot find set identified by id 0 to match [ 532.764543][ T7660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.757445][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.772614][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.783438][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.803329][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.813291][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 533.822423][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.620160][ T5233] Bluetooth: hci1: command tx timeout [ 537.611575][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.036042][ T1818] bridge_slave_1: left allmulticast mode [ 538.041761][ T1818] bridge_slave_1: left promiscuous mode [ 538.105118][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.190637][ T1818] bridge_slave_0: left allmulticast mode [ 538.235513][ T1818] bridge_slave_0: left promiscuous mode [ 538.264574][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.705807][ T5232] Bluetooth: hci1: command tx timeout [ 539.749957][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.765639][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.794739][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.822635][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.862909][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 539.876977][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.020661][ T1818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.034925][ T1818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.058125][ T1818] bond0 (unregistering): Released all slaves [ 540.506563][ T1818] hsr_slave_0: left promiscuous mode [ 540.575627][ T1818] hsr_slave_1: left promiscuous mode [ 540.609773][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.650400][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.738107][ T1818] veth1_vlan: left promiscuous mode [ 540.748975][ T1818] veth0_vlan: left promiscuous mode [ 540.786015][ T5232] Bluetooth: hci1: command tx timeout [ 541.197870][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 541.207787][ T5232] Bluetooth: Wrong link type (-22) [ 541.214776][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 541.247479][ T5232] Bluetooth: Wrong link type (-22) [ 541.253160][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 541.260170][ T5232] Bluetooth: Wrong link type (-22) [ 541.266355][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 541.272991][ T5232] Bluetooth: Wrong link type (-22) [ 541.287979][ T5232] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 541.295387][ T5232] Bluetooth: Wrong link type (-22) [ 541.302726][ T5232] Bluetooth: hci5: link tx timeout [ 541.990629][ T5232] Bluetooth: hci2: command tx timeout [ 542.291668][ T1818] team0 (unregistering): Port device team_slave_1 removed [ 542.353385][ T1818] team0 (unregistering): Port device team_slave_0 removed [ 542.865635][ T5232] Bluetooth: hci1: command tx timeout [ 543.472840][ T7835] chnl_net:caif_netlink_parms(): no params data found [ 544.077539][ T5232] Bluetooth: hci2: command tx timeout [ 544.369806][ T7660] veth0_vlan: entered promiscuous mode [ 544.572991][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 544.604058][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 544.683144][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.707737][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.737945][ T7835] bridge_slave_0: entered allmulticast mode [ 544.773045][ T7835] bridge_slave_0: entered promiscuous mode [ 544.787763][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 544.858226][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.895597][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.929009][ T7835] bridge_slave_1: entered allmulticast mode [ 544.951199][ T7835] bridge_slave_1: entered promiscuous mode [ 545.003031][ T7660] veth1_vlan: entered promiscuous mode [ 545.710514][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.615509][ T5232] Bluetooth: hci2: command tx timeout [ 546.972813][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.163418][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.652430][ T7835] team0: Port device team_slave_0 added [ 547.704221][ T7835] team0: Port device team_slave_1 added [ 547.788527][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 547.806778][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 547.914788][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'. [ 548.413586][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.440867][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.505488][ T7835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.617101][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.624749][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.653476][ T5233] Bluetooth: hci2: command tx timeout [ 548.812192][ T7835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.200105][ T7660] veth0_macvtap: entered promiscuous mode [ 549.227898][ T7881] chnl_net:caif_netlink_parms(): no params data found [ 549.388666][ T7835] hsr_slave_0: entered promiscuous mode [ 549.449098][ T7835] hsr_slave_1: entered promiscuous mode [ 549.486124][ T7835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.504083][ T7835] Cannot create hsr debugfs directory [ 549.888684][ T5233] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 549.928536][ T5233] Bluetooth: Wrong link type (-22) [ 550.861351][ T7958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.155972][ T5233] ================================================================== [ 552.164228][ T5233] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270 [ 552.173082][ T5233] Read of size 8 at addr ffff88807e0bf800 by task kworker/u9:4/5233 [ 552.181103][ T5233] [ 552.183473][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: kworker/u9:4 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 552.194376][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 552.204492][ T5233] Workqueue: hci5 hci_rx_work [ 552.209260][ T5233] Call Trace: [ 552.212579][ T5233] [ 552.215556][ T5233] dump_stack_lvl+0x116/0x1f0 [ 552.220293][ T5233] print_report+0xc3/0x620 [ 552.224770][ T5233] ? __virt_addr_valid+0x5e/0x590 [ 552.229847][ T5233] ? __phys_addr+0xc6/0x150 [ 552.234406][ T5233] kasan_report+0xd9/0x110 [ 552.239054][ T5233] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 552.245093][ T5233] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 552.251144][ T5233] l2cap_connect.constprop.0+0x10d8/0x1270 [ 552.257021][ T5233] ? do_raw_spin_unlock+0x172/0x230 [ 552.262282][ T5233] ? __pfx_l2cap_connect.constprop.0+0x10/0x10 [ 552.268589][ T5233] ? __mutex_unlock_slowpath+0x164/0x650 [ 552.274286][ T5233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.280332][ T5233] l2cap_recv_frame+0xf0b/0x8eb0 [ 552.285337][ T5233] ? hci_rx_work+0xa87/0x1610 [ 552.290080][ T5233] ? __pfx_lock_release+0x10/0x10 [ 552.295158][ T5233] ? __pfx___lock_acquire+0x10/0x10 [ 552.300407][ T5233] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 552.305845][ T5233] ? trace_contention_end+0xea/0x140 [ 552.311196][ T5233] ? __mutex_unlock_slowpath+0x164/0x650 [ 552.316893][ T5233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.322932][ T5233] ? hci_rx_work+0xa73/0x1610 [ 552.327678][ T5233] ? hci_conn_enter_active_mode+0x219/0x360 [ 552.333616][ T5233] ? __pfx_lock_release+0x10/0x10 [ 552.338697][ T5233] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 552.344988][ T5233] l2cap_recv_acldata+0x9b4/0xb70 [ 552.350076][ T5233] hci_rx_work+0xaab/0x1610 [ 552.354647][ T5233] process_one_work+0x9c5/0x1b40 [ 552.359643][ T5233] ? __pfx_lock_acquire+0x10/0x10 [ 552.364717][ T5233] ? __pfx_process_one_work+0x10/0x10 [ 552.370148][ T5233] ? assign_work+0x1a0/0x250 [ 552.374796][ T5233] worker_thread+0x6c8/0xf20 [ 552.379445][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 552.384611][ T5233] kthread+0x2c1/0x3a0 [ 552.388721][ T5233] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.393975][ T5233] ? __pfx_kthread+0x10/0x10 [ 552.398620][ T5233] ret_from_fork+0x45/0x80 [ 552.403089][ T5233] ? __pfx_kthread+0x10/0x10 [ 552.407720][ T5233] ret_from_fork_asm+0x1a/0x30 [ 552.412551][ T5233] [ 552.415597][ T5233] [ 552.417940][ T5233] Allocated by task 5232: [ 552.422291][ T5233] kasan_save_stack+0x33/0x60 [ 552.427013][ T5233] kasan_save_track+0x14/0x30 [ 552.431734][ T5233] __kasan_kmalloc+0xaa/0xb0 [ 552.436382][ T5233] l2cap_conn_add.part.0+0x60/0xa60 [ 552.441641][ T5233] l2cap_connect_cfm+0x428/0xf80 [ 552.446665][ T5233] hci_remote_features_evt+0x548/0x9e0 [ 552.452280][ T5233] hci_event_packet+0x9eb/0x1180 [ 552.457340][ T5233] hci_rx_work+0x2c6/0x1610 [ 552.461905][ T5233] process_one_work+0x9c5/0x1b40 [ 552.466896][ T5233] worker_thread+0x6c8/0xf20 [ 552.471540][ T5233] kthread+0x2c1/0x3a0 [ 552.475653][ T5233] ret_from_fork+0x45/0x80 [ 552.480133][ T5233] ret_from_fork_asm+0x1a/0x30 [ 552.484960][ T5233] [ 552.487377][ T5233] Freed by task 5232: [ 552.491390][ T5233] kasan_save_stack+0x33/0x60 [ 552.496119][ T5233] kasan_save_track+0x14/0x30 [ 552.500853][ T5233] kasan_save_free_info+0x3b/0x60 [ 552.505945][ T5233] poison_slab_object+0xf7/0x160 [ 552.510934][ T5233] __kasan_slab_free+0x32/0x50 [ 552.516452][ T5233] kfree+0x12a/0x3b0 [ 552.520396][ T5233] l2cap_conn_del+0x59d/0x730 [ 552.525209][ T5233] l2cap_connect_cfm+0x9e6/0xf80 [ 552.530206][ T5233] hci_conn_failed+0x1c3/0x370 [ 552.535025][ T5233] hci_abort_conn_sync+0x75a/0xb50 [ 552.540187][ T5233] abort_conn_sync+0x197/0x360 [ 552.545014][ T5233] hci_cmd_sync_work+0x1a4/0x410 [ 552.549998][ T5233] process_one_work+0x9c5/0x1b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.554995][ T5233] worker_thread+0x6c8/0xf20 [ 552.559638][ T5233] kthread+0x2c1/0x3a0 [ 552.563751][ T5233] ret_from_fork+0x45/0x80 [ 552.568245][ T5233] ret_from_fork_asm+0x1a/0x30 [ 552.573093][ T5233] [ 552.575449][ T5233] Last potentially related work creation: [ 552.581190][ T5233] kasan_save_stack+0x33/0x60 [ 552.585920][ T5233] __kasan_record_aux_stack+0xba/0xd0 [ 552.591360][ T5233] insert_work+0x36/0x230 [ 552.595749][ T5233] __queue_work+0x97e/0x1070 [ 552.600396][ T5233] call_timer_fn+0x1a0/0x610 [ 552.605065][ T5233] __run_timers+0x567/0xaf0 [ 552.609608][ T5233] run_timer_base+0x111/0x190 [ 552.614326][ T5233] run_timer_softirq+0x1a/0x40 [ 552.619127][ T5233] handle_softirqs+0x216/0x8f0 [ 552.623952][ T5233] irq_exit_rcu+0xbb/0x120 [ 552.628417][ T5233] sysvec_apic_timer_interrupt+0x95/0xb0 [ 552.634144][ T5233] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.640182][ T5233] [ 552.642522][ T5233] Second to last potentially related work creation: [ 552.649387][ T5233] kasan_save_stack+0x33/0x60 [ 552.654099][ T5233] __kasan_record_aux_stack+0xba/0xd0 [ 552.659524][ T5233] insert_work+0x36/0x230 [ 552.663887][ T5233] __queue_work+0x3f8/0x1070 [ 552.668513][ T5233] queue_work_on+0x11a/0x140 [ 552.673164][ T5233] l2cap_connect_cfm+0x9c9/0xf80 [ 552.678165][ T5233] hci_remote_features_evt+0x548/0x9e0 [ 552.683663][ T5233] hci_event_packet+0x9eb/0x1180 [ 552.688644][ T5233] hci_rx_work+0x2c6/0x1610 [ 552.693189][ T5233] process_one_work+0x9c5/0x1b40 [ 552.698178][ T5233] worker_thread+0x6c8/0xf20 [ 552.702833][ T5233] kthread+0x2c1/0x3a0 [ 552.706925][ T5233] ret_from_fork+0x45/0x80 [ 552.711400][ T5233] ret_from_fork_asm+0x1a/0x30 [ 552.716213][ T5233] [ 552.718559][ T5233] The buggy address belongs to the object at ffff88807e0bf800 [ 552.718559][ T5233] which belongs to the cache kmalloc-1k of size 1024 [ 552.732936][ T5233] The buggy address is located 0 bytes inside of [ 552.732936][ T5233] freed 1024-byte region [ffff88807e0bf800, ffff88807e0bfc00) [ 552.746691][ T5233] [ 552.749032][ T5233] The buggy address belongs to the physical page: [ 552.755465][ T5233] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e0b8 [ 552.764259][ T5233] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 552.772783][ T5233] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 552.780374][ T5233] page_type: 0xfdffffff(slab) [ 552.785217][ T5233] raw: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 552.793843][ T5233] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 552.802490][ T5233] head: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122 [ 552.811195][ T5233] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 552.819909][ T5233] head: 00fff00000000003 ffffea0001f82e01 ffffffffffffffff 0000000000000000 [ 552.828628][ T5233] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 552.837331][ T5233] page dumped because: kasan: bad access detected [ 552.843773][ T5233] page_owner tracks the page as allocated [ 552.849515][ T5233] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6893, tgid 6893 (syz-executor), ts 357991789147, free_ts 355106941550 [ 552.872596][ T5233] post_alloc_hook+0x2d1/0x350 [ 552.877418][ T5233] get_page_from_freelist+0x1351/0x2e50 [ 552.883012][ T5233] __alloc_pages_noprof+0x22b/0x2460 [ 552.888339][ T5233] alloc_slab_page+0x4e/0xf0 [ 552.892996][ T5233] new_slab+0x84/0x260 [ 552.897111][ T5233] ___slab_alloc+0xdac/0x1870 [ 552.901828][ T5233] __slab_alloc.constprop.0+0x56/0xb0 [ 552.907245][ T5233] __kmalloc_node_noprof+0x357/0x430 [ 552.912574][ T5233] __kvmalloc_node_noprof+0x9d/0x1a0 [ 552.917896][ T5233] bucket_table_alloc.isra.0+0x86/0x470 [ 552.923485][ T5233] rhashtable_init_noprof+0x41a/0x7e0 [ 552.928903][ T5233] ioam6_net_init+0xb1/0x170 [ 552.933533][ T5233] ops_init+0xb9/0x650 [ 552.937631][ T5233] setup_net+0x435/0xb40 [ 552.941902][ T5233] copy_net_ns+0x2fb/0x700 [ 552.946356][ T5233] create_new_namespaces+0x3ea/0xad0 [ 552.951720][ T5233] page last free pid 6436 tgid 6436 stack trace: [ 552.958068][ T5233] free_unref_page+0x64a/0xe40 [ 552.962872][ T5233] vfree+0x181/0x7a0 [ 552.966805][ T5233] kcov_put+0x2a/0x40 [ 552.970822][ T5233] kcov_close+0x10/0x20 [ 552.975011][ T5233] __fput+0x408/0xbb0 [ 552.979033][ T5233] task_work_run+0x14e/0x250 [ 552.983693][ T5233] do_exit+0xaa3/0x2bb0 [ 552.987962][ T5233] do_group_exit+0xd3/0x2a0 [ 552.992505][ T5233] get_signal+0x25fd/0x2770 [ 552.997049][ T5233] arch_do_signal_or_restart+0x90/0x7e0 [ 553.002721][ T5233] syscall_exit_to_user_mode+0x150/0x2a0 [ 553.008578][ T5233] do_syscall_64+0xda/0x250 [ 553.013146][ T5233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.019178][ T5233] [ 553.021512][ T5233] Memory state around the buggy address: [ 553.027151][ T5233] ffff88807e0bf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 553.035278][ T5233] ffff88807e0bf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 553.043484][ T5233] >ffff88807e0bf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 553.051567][ T5233] ^ [ 553.055645][ T5233] ffff88807e0bf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 553.063724][ T5233] ffff88807e0bf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 553.071816][ T5233] ================================================================== [ 553.165270][ T5233] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 553.172557][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/u9:4 Not tainted 6.11.0-rc4-syzkaller-00135-gaa0743a22936 #0 [ 553.183460][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 553.193648][ T5233] Workqueue: hci5 hci_rx_work [ 553.198402][ T5233] Call Trace: [ 553.201714][ T5233] [ 553.204687][ T5233] dump_stack_lvl+0x3d/0x1f0 [ 553.209330][ T5233] panic+0x6dc/0x7c0 [ 553.213274][ T5233] ? __pfx_panic+0x10/0x10 [ 553.217743][ T5233] ? preempt_schedule_thunk+0x1a/0x30 [ 553.223167][ T5233] ? preempt_schedule_common+0x44/0xc0 [ 553.228697][ T5233] check_panic_on_warn+0xab/0xb0 [ 553.233694][ T5233] end_report+0x117/0x180 [ 553.238076][ T5233] kasan_report+0xe9/0x110 [ 553.242557][ T5233] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 553.248594][ T5233] ? l2cap_connect.constprop.0+0x10d8/0x1270 [ 553.254629][ T5233] l2cap_connect.constprop.0+0x10d8/0x1270 [ 553.260493][ T5233] ? do_raw_spin_unlock+0x172/0x230 [ 553.265751][ T5233] ? __pfx_l2cap_connect.constprop.0+0x10/0x10 [ 553.271967][ T5233] ? __mutex_unlock_slowpath+0x164/0x650 [ 553.277659][ T5233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.283712][ T5233] l2cap_recv_frame+0xf0b/0x8eb0 [ 553.288711][ T5233] ? hci_rx_work+0xa87/0x1610 [ 553.293443][ T5233] ? __pfx_lock_release+0x10/0x10 [ 553.298496][ T5233] ? __pfx___lock_acquire+0x10/0x10 [ 553.303716][ T5233] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 553.309118][ T5233] ? trace_contention_end+0xea/0x140 [ 553.314436][ T5233] ? __mutex_unlock_slowpath+0x164/0x650 [ 553.320107][ T5233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.326122][ T5233] ? hci_rx_work+0xa73/0x1610 [ 553.330834][ T5233] ? hci_conn_enter_active_mode+0x219/0x360 [ 553.336744][ T5233] ? __pfx_lock_release+0x10/0x10 [ 553.341803][ T5233] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 553.348060][ T5233] l2cap_recv_acldata+0x9b4/0xb70 [ 553.353112][ T5233] hci_rx_work+0xaab/0x1610 [ 553.357651][ T5233] process_one_work+0x9c5/0x1b40 [ 553.362642][ T5233] ? __pfx_lock_acquire+0x10/0x10 [ 553.367692][ T5233] ? __pfx_process_one_work+0x10/0x10 [ 553.373106][ T5233] ? assign_work+0x1a0/0x250 [ 553.377721][ T5233] worker_thread+0x6c8/0xf20 [ 553.382342][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 553.387480][ T5233] kthread+0x2c1/0x3a0 [ 553.391559][ T5233] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.396780][ T5233] ? __pfx_kthread+0x10/0x10 [ 553.401386][ T5233] ret_from_fork+0x45/0x80 [ 553.405837][ T5233] ? __pfx_kthread+0x10/0x10 [ 553.410440][ T5233] ret_from_fork_asm+0x1a/0x30 [ 553.415246][ T5233] [ 553.418606][ T5233] Kernel Offset: disabled [ 553.422936][ T5233] Rebooting in 86400 seconds..