last executing test programs: 28.575799935s ago: executing program 0 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1}, 0x40) syz_emit_ethernet(0x1e, &(0x7f00000006c0)={@local, @empty, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "ca9ab19eaab33614"}}}}, 0x0) 27.691498297s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 27.298283162s ago: executing program 0 (id=14): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) 26.725032957s ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0x38) 26.485155678s ago: executing program 2 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {}, @broadcast, @device_a, @compressed}}]}, 0x40}}, 0x0) 26.268411679s ago: executing program 4 (id=5): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x25, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) 25.866217879s ago: executing program 4 (id=21): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x88) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000600000000000c00018008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\a'], 0x30}}, 0x0) 25.821968294s ago: executing program 2 (id=22): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) 25.817549568s ago: executing program 0 (id=23): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 25.306404034s ago: executing program 4 (id=25): r0 = io_uring_setup(0x1ba5, &(0x7f00000002c0)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 25.259900929s ago: executing program 2 (id=26): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x24}}, 0x0) 25.038545707s ago: executing program 0 (id=28): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 24.952426281s ago: executing program 1 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103000000470000000027"], 0x14}}, 0x0) 24.882192011s ago: executing program 2 (id=30): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) 24.524098244s ago: executing program 4 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'Y'}]}]}, 0x34}}, 0x0) 24.463142457s ago: executing program 2 (id=32): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lld}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 24.428336488s ago: executing program 1 (id=33): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x81) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 24.089325742s ago: executing program 4 (id=34): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) 24.056958865s ago: executing program 2 (id=35): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xc6, 0x65, 0xcf, 0x40, 0x8dd, 0x90ff, 0x5d5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xf8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23.854171262s ago: executing program 3 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="47000000000000008a007f00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 23.529796048s ago: executing program 4 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000001240)={0x0, 0xffffffc, 0x8}) 23.285432243s ago: executing program 3 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x211}}) 1.731530699s ago: executing program 1 (id=39): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.698043398s ago: executing program 3 (id=40): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') lseek(r1, 0x5, 0x1) 1.47183794s ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x48800) 667.720834ms ago: executing program 1 (id=42): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3800048, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 634.16126ms ago: executing program 3 (id=43): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x4aa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 561.394762ms ago: executing program 3 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc1, 0x0) fstat(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x400454ca, 0x20000000) 281.701343ms ago: executing program 1 (id=45): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r1) 0s ago: executing program 3 (id=46): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x2c}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 97.724642][ T945] cfg80211: failed to load regulatory.db [ 102.441686][ T29] audit: type=1400 audit(1725632415.759:88): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 102.453810][ T5212] cgroup: Unknown subsys name 'net' [ 102.464629][ T29] audit: type=1400 audit(1725632415.759:89): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.493195][ T29] audit: type=1400 audit(1725632415.789:90): avc: denied { unmount } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.686478][ T5212] cgroup: Unknown subsys name 'rlimit' [ 102.891269][ T29] audit: type=1400 audit(1725632416.199:91): avc: denied { setattr } for pid=5212 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.940323][ T29] audit: type=1400 audit(1725632416.209:92): avc: denied { create } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.974315][ T29] audit: type=1400 audit(1725632416.209:93): avc: denied { write } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.995353][ T29] audit: type=1400 audit(1725632416.209:94): avc: denied { read } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.016512][ T29] audit: type=1400 audit(1725632416.229:95): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 103.041462][ T29] audit: type=1400 audit(1725632416.229:96): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 103.065763][ T29] audit: type=1400 audit(1725632416.239:97): avc: denied { read } for pid=4889 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 103.118577][ T5217] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 105.013663][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.020209][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 108.020234][ T29] audit: type=1400 audit(1725632421.329:103): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 108.082158][ T29] audit: type=1400 audit(1725632421.329:104): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.152983][ T29] audit: type=1400 audit(1725632421.329:105): avc: denied { create } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.190171][ T29] audit: type=1400 audit(1725632421.329:106): avc: denied { read write } for pid=5225 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.217021][ T29] audit: type=1400 audit(1725632421.339:107): avc: denied { open } for pid=5225 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.243190][ T29] audit: type=1400 audit(1725632421.389:108): avc: denied { ioctl } for pid=5225 comm="syz-executor" path="socket:[3636]" dev="sockfs" ino=3636 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.262244][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.279462][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.288146][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.302657][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.322030][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.329524][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.362632][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.381921][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.391824][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.411681][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.423492][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.439742][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.446414][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.455708][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.455749][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.473081][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.475633][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.487415][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.498046][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.498662][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.510051][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.513572][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.522326][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.534565][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.542339][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.551318][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.561015][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.561627][ T29] audit: type=1400 audit(1725632421.849:109): avc: denied { read } for pid=5230 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.570250][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.600388][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.617681][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.671808][ T29] audit: type=1400 audit(1725632421.909:111): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.699984][ T29] audit: type=1400 audit(1725632421.869:110): avc: denied { open } for pid=5233 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.409968][ T29] audit: type=1400 audit(1725632422.709:112): avc: denied { module_request } for pid=5227 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.565109][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 109.794643][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 109.840800][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 109.952587][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 110.007190][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 110.204173][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.213678][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.221281][ T5227] bridge_slave_0: entered allmulticast mode [ 110.229552][ T5227] bridge_slave_0: entered promiscuous mode [ 110.288081][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.295607][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.303173][ T5227] bridge_slave_1: entered allmulticast mode [ 110.310963][ T5227] bridge_slave_1: entered promiscuous mode [ 110.369777][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.377894][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.385606][ T5225] bridge_slave_0: entered allmulticast mode [ 110.393834][ T5225] bridge_slave_0: entered promiscuous mode [ 110.507762][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.516312][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.524968][ T5240] Bluetooth: hci2: command tx timeout [ 110.530796][ T5225] bridge_slave_1: entered allmulticast mode [ 110.538769][ T5225] bridge_slave_1: entered promiscuous mode [ 110.587077][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.594540][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.602707][ T5233] bridge_slave_0: entered allmulticast mode [ 110.610671][ T5233] bridge_slave_0: entered promiscuous mode [ 110.617032][ T5240] Bluetooth: hci4: command tx timeout [ 110.628346][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.635738][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.643274][ T5233] bridge_slave_1: entered allmulticast mode [ 110.650936][ T5233] bridge_slave_1: entered promiscuous mode [ 110.658820][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.666083][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.673428][ T5226] bridge_slave_0: entered allmulticast mode [ 110.681330][ T5240] Bluetooth: hci3: command tx timeout [ 110.681372][ T5234] Bluetooth: hci1: command tx timeout [ 110.683093][ T5226] bridge_slave_0: entered promiscuous mode [ 110.692512][ T5240] Bluetooth: hci0: command tx timeout [ 110.773885][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.789177][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.837692][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.849836][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.857354][ T5226] bridge_slave_1: entered allmulticast mode [ 110.866348][ T5226] bridge_slave_1: entered promiscuous mode [ 110.896584][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.904238][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.911955][ T5230] bridge_slave_0: entered allmulticast mode [ 110.919732][ T5230] bridge_slave_0: entered promiscuous mode [ 110.933508][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.947860][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.982032][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.997004][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.024568][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.032105][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.039364][ T5230] bridge_slave_1: entered allmulticast mode [ 111.049446][ T5230] bridge_slave_1: entered promiscuous mode [ 111.123753][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.178977][ T5227] team0: Port device team_slave_0 added [ 111.210469][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.263427][ T5225] team0: Port device team_slave_0 added [ 111.275383][ T5227] team0: Port device team_slave_1 added [ 111.308829][ T5233] team0: Port device team_slave_0 added [ 111.342910][ T5226] team0: Port device team_slave_0 added [ 111.355391][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.369238][ T5225] team0: Port device team_slave_1 added [ 111.424165][ T5233] team0: Port device team_slave_1 added [ 111.432493][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.439505][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.465868][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.484259][ T5226] team0: Port device team_slave_1 added [ 111.495058][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.609754][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.617120][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.643801][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.708297][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.715464][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.743087][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.756952][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.765131][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.792222][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.806992][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.814558][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.840580][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.876386][ T5230] team0: Port device team_slave_0 added [ 111.887840][ T5230] team0: Port device team_slave_1 added [ 111.896335][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.904044][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.930119][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.996268][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.003840][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.030037][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.044058][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.051186][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.077277][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.155685][ T5227] hsr_slave_0: entered promiscuous mode [ 112.166522][ T5227] hsr_slave_1: entered promiscuous mode [ 112.187309][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.194537][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.220996][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.235523][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.242647][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.268823][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.433973][ T5233] hsr_slave_0: entered promiscuous mode [ 112.442947][ T5233] hsr_slave_1: entered promiscuous mode [ 112.452601][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.460666][ T5233] Cannot create hsr debugfs directory [ 112.475986][ T5226] hsr_slave_0: entered promiscuous mode [ 112.483475][ T5226] hsr_slave_1: entered promiscuous mode [ 112.490258][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.498122][ T5226] Cannot create hsr debugfs directory [ 112.558270][ T5225] hsr_slave_0: entered promiscuous mode [ 112.566260][ T5225] hsr_slave_1: entered promiscuous mode [ 112.573229][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.580863][ T5225] Cannot create hsr debugfs directory [ 112.609556][ T5240] Bluetooth: hci2: command tx timeout [ 112.676415][ T5230] hsr_slave_0: entered promiscuous mode [ 112.688567][ T5230] hsr_slave_1: entered promiscuous mode [ 112.696450][ T5240] Bluetooth: hci4: command tx timeout [ 112.702187][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.710126][ T5230] Cannot create hsr debugfs directory [ 112.761338][ T5234] Bluetooth: hci0: command tx timeout [ 112.761348][ T5237] Bluetooth: hci3: command tx timeout [ 112.773868][ T5240] Bluetooth: hci1: command tx timeout [ 113.563573][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.590393][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.606774][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.619485][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.733229][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.747615][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.796573][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.829341][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.933461][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.947431][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.005158][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.048447][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.160807][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.174788][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.189472][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.234328][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.408162][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.426458][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.463626][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.477583][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.515897][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.590487][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.683390][ T5240] Bluetooth: hci2: command tx timeout [ 114.718663][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.726301][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.762524][ T5240] Bluetooth: hci4: command tx timeout [ 114.833644][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.840911][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.849165][ T5240] Bluetooth: hci0: command tx timeout [ 114.853034][ T5237] Bluetooth: hci3: command tx timeout [ 114.860408][ T5234] Bluetooth: hci1: command tx timeout [ 114.944454][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.967075][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.019620][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.096822][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.104131][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.124814][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.132124][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.184467][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.263988][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.313624][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.322385][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.380307][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.388468][ T29] audit: type=1400 audit(1725632428.689:113): avc: denied { sys_module } for pid=5226 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.429795][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.437167][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.518872][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.526212][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.545719][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.553066][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.738072][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.874926][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.911638][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.930960][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.078855][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.086207][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.214821][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.222241][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.387295][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.440595][ T5226] veth0_vlan: entered promiscuous mode [ 116.518997][ T5226] veth1_vlan: entered promiscuous mode [ 116.670074][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.760581][ T5227] veth0_vlan: entered promiscuous mode [ 116.766358][ T5234] Bluetooth: hci2: command tx timeout [ 116.798803][ T5226] veth0_macvtap: entered promiscuous mode [ 116.841933][ T5234] Bluetooth: hci4: command tx timeout [ 116.864704][ T5226] veth1_macvtap: entered promiscuous mode [ 116.924112][ T5234] Bluetooth: hci0: command tx timeout [ 116.926915][ T5227] veth1_vlan: entered promiscuous mode [ 116.929579][ T5234] Bluetooth: hci1: command tx timeout [ 116.940654][ T5237] Bluetooth: hci3: command tx timeout [ 116.980924][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.000526][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.085645][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.133500][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.143387][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.152697][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.164111][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.276492][ T5233] veth0_vlan: entered promiscuous mode [ 117.358662][ T5227] veth0_macvtap: entered promiscuous mode [ 117.436821][ T5233] veth1_vlan: entered promiscuous mode [ 117.493320][ T5227] veth1_macvtap: entered promiscuous mode [ 117.536144][ T5225] veth0_vlan: entered promiscuous mode [ 117.554887][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.676779][ T5225] veth1_vlan: entered promiscuous mode [ 117.712235][ T5233] veth0_macvtap: entered promiscuous mode [ 117.726402][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.737268][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.749269][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.765832][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.769020][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.803027][ T5233] veth1_macvtap: entered promiscuous mode [ 117.824169][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.841963][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.863422][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.967798][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.970274][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.986010][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.998622][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.001809][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.008248][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.058086][ T29] audit: type=1400 audit(1725632431.369:114): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/root/syzkaller.edvGZv/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.126718][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.138452][ T29] audit: type=1400 audit(1725632431.399:115): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.165680][ T29] audit: type=1400 audit(1725632431.409:116): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/root/syzkaller.edvGZv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.173457][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.198559][ T29] audit: type=1400 audit(1725632431.409:117): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.230639][ T29] audit: type=1400 audit(1725632431.459:118): avc: denied { unmount } for pid=5226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.238498][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.261456][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.276276][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.289049][ T29] audit: type=1400 audit(1725632431.589:119): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.360961][ T5225] veth0_macvtap: entered promiscuous mode [ 118.382720][ T29] audit: type=1400 audit(1725632431.599:120): avc: denied { mount } for pid=5226 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 118.440733][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.454514][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.466008][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.476580][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.488734][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.525820][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.535284][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.544209][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.554168][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.574338][ T5225] veth1_macvtap: entered promiscuous mode [ 118.628642][ T29] audit: type=1400 audit(1725632431.939:121): avc: denied { read write } for pid=5226 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.683607][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.691218][ T29] audit: type=1400 audit(1725632431.969:122): avc: denied { open } for pid=5226 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.727778][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.760644][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.773644][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.787282][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.798187][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.814345][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.883122][ T5309] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 118.953775][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.976066][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.987000][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.997545][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.010990][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025965][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.038373][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.066593][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.075554][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.232610][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.249514][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.269530][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.288337][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.319380][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.349018][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.438670][ T5230] veth0_vlan: entered promiscuous mode [ 119.546911][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.581611][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.695493][ T5230] veth1_vlan: entered promiscuous mode [ 119.722078][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.761845][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.977556][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.999178][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.154303][ T5319] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 120.384773][ T5230] veth0_macvtap: entered promiscuous mode [ 120.435856][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.457263][ T5230] veth1_macvtap: entered promiscuous mode [ 120.491594][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 120.491618][ T29] audit: type=1400 audit(1725632433.769:128): avc: denied { read write } for pid=5322 comm="syz.1.9" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.521042][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.593779][ T29] audit: type=1400 audit(1725632433.769:129): avc: denied { open } for pid=5322 comm="syz.1.9" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.687846][ T29] audit: type=1400 audit(1725632433.769:130): avc: denied { ioctl } for pid=5322 comm="syz.1.9" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.717853][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.743882][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.757850][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.773003][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.782977][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.790005][ T29] audit: type=1400 audit(1725632433.979:131): avc: denied { create } for pid=5325 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.797202][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.841796][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.861156][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.884878][ T29] audit: type=1400 audit(1725632433.989:132): avc: denied { ioctl } for pid=5325 comm="syz.0.10" path="socket:[7436]" dev="sockfs" ino=7436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.904628][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.944500][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.949299][ T29] audit: type=1400 audit(1725632433.999:133): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.zo0qKA/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.979891][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.014384][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.034624][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.037911][ T29] audit: type=1400 audit(1725632434.269:134): avc: denied { prog_load } for pid=5327 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.088158][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.088287][ T29] audit: type=1400 audit(1725632434.269:135): avc: denied { bpf } for pid=5327 comm="syz.3.11" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.128874][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.140066][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.152352][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 121.167063][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.184105][ T29] audit: type=1400 audit(1725632434.279:136): avc: denied { perfmon } for pid=5327 comm="syz.3.11" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.185954][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.228870][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.263790][ T29] audit: type=1400 audit(1725632434.279:137): avc: denied { prog_run } for pid=5327 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.265573][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.300341][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.319350][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.369146][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.390869][ T9] usb 2-1: config 0 descriptor?? [ 121.397022][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.400638][ T5323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.498580][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.525516][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.547927][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.583162][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.032003][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 122.074344][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 122.261003][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 122.298819][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.372447][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.437039][ T9] usb 2-1: USB disconnect, device number 2 [ 122.722272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.730261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.808818][ T5354] sp0: Synchronizing with TNC [ 124.771019][ T53] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.810429][ T53] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.849490][ T53] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.888760][ T53] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.963888][ T53] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.081951][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.306850][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.325529][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.340977][ T25] usb 1-1: Product: syz [ 125.377167][ T25] usb 1-1: Manufacturer: syz [ 125.392376][ T25] usb 1-1: SerialNumber: syz [ 125.434261][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.572655][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 125.572687][ T29] audit: type=1400 audit(1725632438.889:161): avc: denied { create } for pid=5388 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.598720][ T53] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.717090][ T29] audit: type=1400 audit(1725632438.939:162): avc: denied { write } for pid=5388 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.011357][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.268352][ T8] usb 3-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 126.310944][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.367796][ T8] usb 3-1: Product: syz [ 126.391314][ T8] usb 3-1: Manufacturer: syz [ 126.395992][ T8] usb 3-1: SerialNumber: syz [ 126.432072][ T8] usb 3-1: config 0 descriptor?? [ 126.458749][ C1] hrtimer: interrupt took 19267273 ns [ 127.529232][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.568675][ T8] asix 3-1:0.0: probe with driver asix failed with error -71 [ 127.665299][ T8] usb 3-1: USB disconnect, device number 2 [ 127.894561][ T29] audit: type=1400 audit(1725632441.199:163): avc: denied { ioctl } for pid=5406 comm="syz.1.41" path="socket:[7598]" dev="sockfs" ino=7598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.356516][ T29] audit: type=1400 audit(1725632441.669:164): avc: denied { create } for pid=5410 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.392047][ T5411] ======================================================= [ 128.392047][ T5411] WARNING: The mand mount option has been deprecated and [ 128.392047][ T5411] and is ignored by this kernel. Remove the mand [ 128.392047][ T5411] option from the mount to silence this warning. [ 128.392047][ T5411] ======================================================= [ 128.440445][ T29] audit: type=1400 audit(1725632441.699:165): avc: denied { read write } for pid=5410 comm="syz.1.42" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.731930][ T29] audit: type=1400 audit(1725632441.699:166): avc: denied { open } for pid=5410 comm="syz.1.42" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.767302][ T29] audit: type=1400 audit(1725632441.709:167): avc: denied { mounton } for pid=5410 comm="syz.1.42" path="/7/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.550800][ T29] audit: type=1400 audit(1725632442.859:168): avc: denied { create } for pid=5415 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.620060][ T29] audit: type=1400 audit(1725632442.889:169): avc: denied { shutdown } for pid=5417 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.668741][ T29] audit: type=1400 audit(1725632442.899:170): avc: denied { connect } for pid=5417 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.707460][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.721318][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.419504][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2637 jiffies s: 1549 root: 0x2/. [ 153.521293][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 153.528591][ T19] Sending NMI from CPU 0 to CPUs 1: [ 153.534011][ C1] NMI backtrace for cpu 1 [ 153.534039][ C1] CPU: 1 UID: 0 PID: 5230 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 153.534071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 153.534087][ C1] RIP: 0010:unwind_next_frame+0xdd9/0x23a0 [ 153.534129][ C1] Code: 84 37 f6 ff ff e8 97 d3 4e 00 48 8b 7c 24 28 e8 6d e6 ff ff 48 8b 0c 24 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 2c 12 00 00 48 8b 54 24 10 48 89 43 48 48 b8 00 00 00 00 00 [ 153.534154][ C1] RSP: 0018:ffffc90000a17618 EFLAGS: 00000046 [ 153.534185][ C1] RAX: ffffffff81501d3c RBX: ffffc90000a17698 RCX: 1ffff92000142edc [ 153.534204][ C1] RDX: dffffc0000000000 RSI: ffffffff813cd339 RDI: ffffc90000a18ed0 [ 153.534222][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 153.534237][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff914c8628 [ 153.534254][ C1] R13: ffffc90000a18ed8 R14: ffffffff914c862c R15: 0000000000000001 [ 153.534271][ C1] FS: 000055558a40c500(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 153.534297][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.534315][ C1] CR2: 0000001b32505ff8 CR3: 000000003282c000 CR4: 00000000003506f0 [ 153.534332][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.534348][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.534364][ C1] Call Trace: [ 153.534372][ C1] [ 153.534380][ C1] ? show_regs+0x8c/0xa0 [ 153.534427][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 153.534469][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 153.534506][ C1] ? nmi_handle+0x1a9/0x5c0 [ 153.534532][ C1] ? unwind_next_frame+0xdd9/0x23a0 [ 153.534558][ C1] ? default_do_nmi+0x6a/0x160 [ 153.534588][ C1] ? exc_nmi+0x170/0x1e0 [ 153.534616][ C1] ? end_repeat_nmi+0xf/0x53 [ 153.534649][ C1] ? tasklet_action_common.constprop.0+0x24c/0x3e0 [ 153.534683][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 153.534708][ C1] ? unwind_next_frame+0xdd9/0x23a0 [ 153.534735][ C1] ? unwind_next_frame+0xdd9/0x23a0 [ 153.534762][ C1] ? unwind_next_frame+0xdd9/0x23a0 [ 153.534788][ C1] [ 153.534796][ C1] [ 153.534806][ C1] ? ieee80211_handle_queued_frames+0xd5/0x130 [ 153.534840][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.534876][ C1] arch_stack_walk+0x100/0x170 [ 153.534909][ C1] ? ieee80211_handle_queued_frames+0xd5/0x130 [ 153.534946][ C1] stack_trace_save+0x95/0xd0 [ 153.534978][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.535015][ C1] ? lock_acquire+0x1b1/0x560 [ 153.535054][ C1] kasan_save_stack+0x33/0x60 [ 153.535093][ C1] ? kasan_save_stack+0x33/0x60 [ 153.535130][ C1] ? kasan_save_track+0x14/0x30 [ 153.535167][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 153.535208][ C1] ? dummy_urb_enqueue+0x8d/0x8a0 [ 153.535242][ C1] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 153.535277][ C1] ? usb_submit_urb+0x87c/0x1730 [ 153.535317][ C1] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 153.535343][ C1] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 153.535377][ C1] ? usb_hcd_giveback_urb+0x396/0x450 [ 153.535410][ C1] ? dummy_timer+0x17c3/0x38d0 [ 153.535441][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 153.535469][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 153.535497][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 153.535523][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 153.535558][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.535586][ C1] ? should_failslab+0xa8/0x120 [ 153.535610][ C1] ? __kmalloc_noprof+0xcb/0x400 [ 153.535650][ C1] ? ieee802_11_parse_elems_full+0xea/0x1680 [ 153.535685][ C1] ? ieee80211_inform_bss+0xfd/0x1100 [ 153.535716][ C1] ? cfg80211_inform_single_bss_data+0x8e2/0x1dc0 [ 153.535747][ C1] ? cfg80211_inform_bss_data+0x205/0x39c0 [ 153.535775][ C1] ? cfg80211_inform_bss_frame_data+0x271/0x7a0 [ 153.535805][ C1] ? ieee80211_bss_info_update+0x311/0xab0 [ 153.535838][ C1] ? ieee80211_scan_rx+0x474/0xac0 [ 153.535868][ C1] ? ieee80211_rx_list+0x1be3/0x2e90 [ 153.535903][ C1] ? ieee80211_rx_napi+0xdd/0x400 [ 153.535940][ C1] ? ieee80211_handle_queued_frames+0xd5/0x130 [ 153.535990][ C1] kasan_save_track+0x14/0x30 [ 153.536029][ C1] __kasan_kmalloc+0xaa/0xb0 [ 153.536068][ C1] dummy_urb_enqueue+0x8d/0x8a0 [ 153.536100][ C1] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 153.536141][ C1] usb_hcd_submit_urb+0x2d1/0x2090 [ 153.536187][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 153.536222][ C1] ? lock_acquire+0x1b1/0x560 [ 153.536263][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 153.536301][ C1] ? find_held_lock+0x2d/0x110 [ 153.536333][ C1] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 153.536362][ C1] usb_submit_urb+0x87c/0x1730 [ 153.536406][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 153.536435][ C1] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 153.536464][ C1] __usb_hcd_giveback_urb+0x389/0x6e0 [ 153.536502][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 153.536540][ C1] dummy_timer+0x17c3/0x38d0 [ 153.536578][ C1] ? debug_object_deactivate+0x1f0/0x370 [ 153.536624][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 153.536669][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 153.536697][ C1] ? __pfx_lock_release+0x10/0x10 [ 153.536737][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 153.536770][ C1] ? timerqueue_del+0x83/0x150 [ 153.536808][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 153.536840][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 153.536875][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 153.536905][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 153.536949][ C1] hrtimer_interrupt+0x31b/0x800 [ 153.536988][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 153.537016][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 153.537053][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.537083][ C1] RIP: 0010:should_failslab+0xa8/0x120 [ 153.537109][ C1] Code: 40 74 45 48 8d 7b 1c c1 ee 0d 48 b8 00 00 00 00 00 fc ff df 48 89 f9 89 f2 48 c1 e9 03 83 e2 01 0f b6 0c 01 48 89 f8 83 e0 07 <83> c0 03 38 c8 7c 04 84 c9 75 5c 8b 73 1c 48 c7 c7 20 c0 f6 8d e8 [ 153.537134][ C1] RSP: 0018:ffffc90000a181c8 EFLAGS: 00000202 [ 153.537153][ C1] RAX: 0000000000000004 RBX: ffff88801ac41dc0 RCX: 0000000000000000 [ 153.537169][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801ac41ddc [ 153.537191][ C1] RBP: ffffc90000a18228 R08: 0000000000000007 R09: 0000000000000000 [ 153.537207][ C1] R10: 0000000000000000 R11: ffff8880b8929418 R12: ffff88801ac41dc0 [ 153.537224][ C1] R13: 0000000000000920 R14: 0000000000000398 R15: ffffffff8a93c0fa [ 153.537242][ C1] ? ieee802_11_parse_elems_full+0xea/0x1680 [ 153.537288][ C1] __kmalloc_noprof+0xcb/0x400 [ 153.537332][ C1] ieee802_11_parse_elems_full+0xea/0x1680 [ 153.537366][ C1] ? arch_stack_walk+0x100/0x170 [ 153.537393][ C1] ? stack_trace_save+0x95/0xd0 [ 153.537424][ C1] ? save_stack+0x162/0x1f0 [ 153.537457][ C1] ? hlock_class+0x4e/0x130 [ 153.537485][ C1] ? mark_lock+0xb5/0xc60 [ 153.537521][ C1] ? lock_acquire+0x1b1/0x560 [ 153.537562][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 153.537602][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 153.537640][ C1] ? cfg80211_update_known_bss+0x39f/0x1150 [ 153.537682][ C1] ? __pfx_lock_release+0x10/0x10 [ 153.537723][ C1] ? mark_held_locks+0x9f/0xe0 [ 153.537764][ C1] ieee80211_inform_bss+0xfd/0x1100 [ 153.537801][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 153.537838][ C1] ? trace_kmalloc+0x2d/0xe0 [ 153.537868][ C1] ? __kmalloc_noprof+0x207/0x400 [ 153.537910][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 153.537944][ C1] cfg80211_inform_single_bss_data+0x8e2/0x1dc0 [ 153.537976][ C1] ? try_to_wake_up+0x13f/0x13e0 [ 153.538020][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 153.538064][ C1] ? __pfx_lock_release+0x10/0x10 [ 153.538104][ C1] ? find_held_lock+0x2d/0x110 [ 153.538136][ C1] ? cfg80211_inform_bss_data+0x205/0x39c0 [ 153.538166][ C1] cfg80211_inform_bss_data+0x205/0x39c0 [ 153.538206][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 153.538234][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.538270][ C1] ? ieee80211_rx_handlers+0xf10/0x9a50 [ 153.538303][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 153.538331][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 153.538365][ C1] ? hlock_class+0x4e/0x130 [ 153.538396][ C1] ? hlock_class+0x4e/0x130 [ 153.538425][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 153.538478][ C1] ? lock_acquire+0x1b1/0x560 [ 153.538516][ C1] ? find_held_lock+0x2d/0x110 [ 153.538547][ C1] ? ieee80211_bss_info_update+0x2cb/0xab0 [ 153.538583][ C1] cfg80211_inform_bss_frame_data+0x271/0x7a0 [ 153.538621][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 153.538657][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 153.538699][ C1] ? ieee80211_get_channel_khz+0x14d/0x1e0 [ 153.538743][ C1] ieee80211_scan_rx+0x474/0xac0 [ 153.538780][ C1] ieee80211_rx_list+0x1be3/0x2e90 [ 153.538822][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 153.538855][ C1] ? lock_acquire+0x1b1/0x560 [ 153.538903][ C1] ? skb_dequeue+0x126/0x180 [ 153.538939][ C1] ieee80211_rx_napi+0xdd/0x400 [ 153.538974][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 153.539009][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.539045][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.539084][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 153.539118][ C1] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 153.539156][ C1] handle_softirqs+0x216/0x8f0 [ 153.539192][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 153.539225][ C1] irq_exit_rcu+0xbb/0x120 [ 153.539253][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 153.539288][ C1] [ 153.539296][ C1] [ 153.539304][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.539334][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 153.539378][ C1] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 [ 153.539402][ C1] RSP: 0018:ffffc9000371f268 EFLAGS: 00000246 [ 153.539420][ C1] RAX: 0000000000000000 RBX: ffffffff902cd964 RCX: ffffffff813cd424 [ 153.539437][ C1] RDX: ffff88802bc38000 RSI: ffffffff813cd3c3 RDI: 0000000000000006 [ 153.539454][ C1] RBP: ffffffff902cd964 R08: 0000000000000006 R09: ffffffff81e052d0 [ 153.539471][ C1] R10: ffffffff81e051b8 R11: 0000000000000000 R12: ffffffff81e052d0 [ 153.539487][ C1] R13: ffffffff81e051b8 R14: dffffc0000000000 R15: ffffffff902cd964 [ 153.539506][ C1] ? kmem_cache_alloc_noprof+0x8/0x2f0 [ 153.539546][ C1] ? kmem_cache_alloc_noprof+0x120/0x2f0 [ 153.539588][ C1] ? kmem_cache_alloc_noprof+0x8/0x2f0 [ 153.539627][ C1] ? kmem_cache_alloc_noprof+0x120/0x2f0 [ 153.539668][ C1] ? __orc_find+0xc4/0x130 [ 153.539690][ C1] ? __orc_find+0x63/0x130 [ 153.539716][ C1] ? unwind_next_frame+0x51/0x23a0 [ 153.539740][ C1] __orc_find+0x63/0x130 [ 153.539766][ C1] ? kmem_cache_alloc_noprof+0x120/0x2f0 [ 153.539807][ C1] unwind_next_frame+0x335/0x23a0 [ 153.539834][ C1] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 153.539876][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.539911][ C1] arch_stack_walk+0x100/0x170 [ 153.539945][ C1] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 153.539989][ C1] stack_trace_save+0x95/0xd0 [ 153.540021][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 153.540060][ C1] save_stack+0x162/0x1f0 [ 153.540093][ C1] ? __pfx_save_stack+0x10/0x10 [ 153.540124][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 153.540161][ C1] ? free_unref_page+0x64a/0xe40 [ 153.540206][ C1] ? qlist_free_all+0x4e/0x140 [ 153.540241][ C1] ? kasan_quarantine_reduce+0x192/0x1e0 [ 153.540279][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 153.540318][ C1] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 153.540370][ C1] __reset_page_owner+0x8d/0x400 [ 153.540404][ C1] ? __slab_free+0x477/0x4d0 [ 153.540443][ C1] free_unref_page+0x64a/0xe40 [ 153.540488][ C1] qlist_free_all+0x4e/0x140 [ 153.540526][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 153.540567][ C1] __kasan_slab_alloc+0x69/0x90 [ 153.540609][ C1] kmem_cache_alloc_noprof+0x121/0x2f0 [ 153.540649][ C1] ? find_held_lock+0x2d/0x110 [ 153.540677][ C1] ? ptlock_alloc+0x1f/0x70 [ 153.540728][ C1] ptlock_alloc+0x1f/0x70 [ 153.540756][ C1] pte_alloc_one+0x74/0x370 [ 153.540783][ C1] __pte_alloc+0x6e/0x3a0 [ 153.540821][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 153.540858][ C1] ? __pfx___might_resched+0x10/0x10 [ 153.540889][ C1] copy_page_range+0x3285/0x57e0 [ 153.540936][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 153.540965][ C1] ? __pfx_lock_release+0x10/0x10 [ 153.541003][ C1] ? __pfx_mas_store+0x10/0x10 [ 153.541039][ C1] ? down_write+0x14e/0x200 [ 153.541072][ C1] ? up_write+0x1b2/0x520 [ 153.541100][ C1] copy_process+0x8117/0x8de0 [ 153.541131][ C1] ? mark_lock+0xb5/0xc60 [ 153.541186][ C1] ? __pfx_copy_process+0x10/0x10 [ 153.541237][ C1] kernel_clone+0xfd/0x960 [ 153.541270][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 153.541309][ C1] ? find_held_lock+0x59/0x110 [ 153.541337][ C1] ? find_held_lock+0x2d/0x110 [ 153.541369][ C1] __do_sys_clone+0xba/0x100 [ 153.541401][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 153.541441][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 153.541485][ C1] do_syscall_64+0xcd/0x250 [ 153.541527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.541554][ C1] RIP: 0033:0x7fb253d73753 [ 153.541582][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 153.541606][ C1] RSP: 002b:00007ffd8bf6c128 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.541629][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb253d73753 [ 153.541646][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 153.541662][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 153.541678][ C1] R10: 000055558a40c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 153.541694][ C1] R13: 000000000001eb3c R14: 000000000001ea12 R15: 00007ffd8bf6c2b0 [ 153.541721][ C1]