last executing test programs: 5m7.466513657s ago: executing program 3 (id=1265): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010100000000000000000000fffc05000100070000000900020073797a300000000014000780050015000000000008001240000000000c000300686173683a697000050005000a00"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 5m3.95230645s ago: executing program 3 (id=1270): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={{0x2, 0x2}}) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80034c068ff74f467e2615cfb490000190001060000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/111], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000380)) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 5m2.259319905s ago: executing program 3 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x101) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000040)={0x3, 0x1, 0xd, 0x2, 0x84, &(0x7f00000003c0)}) fanotify_mark(0xffffffffffffffff, 0x849c36f1d1c6d41f, 0x0, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[]) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) io_setup(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m1.288886566s ago: executing program 3 (id=1274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000015640)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') r3 = open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) pwritev2(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x35) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) 3m50.847996495s ago: executing program 0 (id=1356): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x0, 0x80c00) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @dev, 0x1}}}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000380)=0x8) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000480)="85", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r5}) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f707172737475767778797a303132333435369e578ffa1bff75974a9f42719314471fc0dd36d867980ad3f7769f643a5ecc3cf240f562595d023c5a4e7d8b4772fa3b5a824aa09da7088a5716df1817b1deabd1f1991a896d8bb4349b0325ca778da264b1ee1223bd278f720d44b9ae5d8c5d5010b167c4fce41b88120bc23e1e969708990c1a0f844405e18b36264fe4e9f230eee6fc9ef8a3e0e58e2096f1ed253a5da6f5f62cda8d67f2b2"], 0x29, r4) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, &(0x7f0000002a80)={'syz', 0x3}, 0x0, 0x0) 3m46.493314537s ago: executing program 0 (id=1364): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x3, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$igmp6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="39082cbd", @ANYBLOB, @ANYRES32, @ANYRES8=r4], 0x24}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 3m43.108235821s ago: executing program 0 (id=1367): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4004810) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x0, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpgrp(0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x0, "fa02c80980000000000023000000000204000000d30000000000006e4200", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x0, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r7, &(0x7f0000000340)="0b000000010000", 0x7) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"000c007c6800df000084cc7ee6df00000000000300", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m41.268956707s ago: executing program 0 (id=1369): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) creat(0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getuid() getpgid(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="b350ee21f7840e03c978d129ef582846f1bf7815a37bacf3439978f6cabf316df004e2cdf4614e6a94facd6de74d42ed99e697a4a8e1e3d049e6346f83bfbfe163168630972a2b09b51481d147f68503905eeb9001c2a29b9ddec9d91bab84e8e7208c13c9d0c31867a96022f722fca350b3830bc2ef975bdc3970c40e1299651cdd2e3150a45a4bdf651e2489a4ea87a27e70c75670a2df720b337a1afb", 0x9e, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m55.997705482s ago: executing program 4 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x140, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d2]}}, @common=@hl={{0x28}, {0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10100, 0x4d0, 0x3, 0x2, 0x1, 0x6, 0x8]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x800000, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405515, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48f40, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m36.087742427s ago: executing program 0 (id=1382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0xc0c5, 0x15, 0x0, 0x8}, {0x3, 0x5, 0x6, 0x7}, {0x2, 0x7, 0x2f, 0x5}, {0x2, 0x80, 0x5, 0x4}, {0x7, 0x7, 0x6, 0x6}]}) r2 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000081d00048008000340000000000800054008000000080007"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) 2m36.072771321s ago: executing program 4 (id=1435): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000001c0), 0x4) ustat(0x3, &(0x7f0000000200)) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x3cc7f92222790a97) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x543403) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000000)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES64, @ANYRES16=r0], 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}, {0x6}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x2000}, {0x0, 0x200001}], 0x10}) 2m30.619042018s ago: executing program 3 (id=1287): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, r1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0xa48, 0x0, 0xa, 0x148, 0x918, 0x60, 0x9b0, 0x2a8, 0x2a8, 0x9b0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x8a8, 0x918, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}, {}, {}, {[{}, {0x0, 0x2}]}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}]}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xaa8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m30.614935025s ago: executing program 0 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) mount(0x0, 0x0, &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x100, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x2000, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r6, 0x4f8ba000) 2m30.60551943s ago: executing program 4 (id=1440): pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0xfffffffffffffd4d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000111401"], 0x28}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000900), 0x2, 0x2) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) 2m28.673539782s ago: executing program 3 (id=1424): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x20}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x80fe) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)="d4c2457d4d5c747f39cde3dc4644f2e40b9f075f74f0f4382542ce5505c5992713cdadb280ee58249b2dea94e1bd8994b046e8", 0x33}, {&(0x7f00000003c0)="0c96463c1d7df513afb3e0916b070e97edb16ab6029e8a1ed896b1dd58d5f41fe7ad243003abfb42842264e1d97b2389613e33b64007cf91c69af5221329c83c095114d65da65e44447e3783855ce1e3c520dd1ef3060b9fbea27dc23b108ff528e700b7ff7e253d7b", 0x69}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000100)="561b65bfdebfbb99e145199c83d1942d5b8f8547f2ef5972568e4a6aaa", 0x1d}], 0x4, 0x9, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 2m28.672466373s ago: executing program 4 (id=1425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x7}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200303, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x20) syz_clone(0x9040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000240)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0xb) writev(r7, &(0x7f0000002080)=[{&(0x7f0000000d40)="9e56", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r9, 0x9, 0x0, 0x0) 2m27.464665246s ago: executing program 4 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0a30c27c375b3e547f6a212eef7830b6df405916f2ec1835f5f7ee5810ef55164e2f0ace3f3307f1d9da1135ab90622226974293279b14f291dc42e620c1d6f7279e5ad304d5233c8626"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m26.942397519s ago: executing program 4 (id=1430): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000380)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="0c009900a4000000660000000800e78ce400ca653e6022"], 0x82}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r5, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) 8.699368462s ago: executing program 2 (id=1556): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000180)=""/28, 0x1c}, {0x0}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x4, 0x1, 0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 8.138586088s ago: executing program 1 (id=1557): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020}, 0x2038) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x100000}, 0x9c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r5, @ANYBLOB="140006"], 0x48}}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40002060) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/152, 0x98}], 0x1}, 0x8000000}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x1dc}}, 0x0) 7.554301867s ago: executing program 2 (id=1558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='net/dev_snmp6\x00') getdents64(r1, &(0x7f0000000100)=""/4014, 0xfae) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_submit(0x0, 0x1, &(0x7f0000002b00)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) 6.128249388s ago: executing program 1 (id=1559): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r4) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000580)="71f34e80732525ac83aacbb37ce35cb82948dbcf41b2b8fef2e00b9ee8063f2611ef19677f0a2c1d9a88fdf572dabe473ed76fbc2114d7ce6d4852d8528586a9d1aa29948da83194825ab03364f8852618f44ae181f8eb45cb9197b6a1fb5cb87847484b8bff7f201777b59db66c0438809cbc7c1ee6f92d12d6c9e5afc9075f62f15e0778127f72bcca4413bbfa059003b5624ede00ad981202838d4fda8e10bdcd8c87e52911de78654d", 0xab, 0xfffffffffffffff9) request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='syz', r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) keyctl$KEYCTL_MOVE(0x6, r2, 0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.853863231s ago: executing program 2 (id=1560): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x8040080) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x11, 0x0, 0x1, 0x9, 0x6, @random="36e3000199b9"}, 0x14) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f0000001140)=""/213, 0xd5}, {&(0x7f0000001240)=""/32, 0x20}, {&(0x7f0000000700)}, {&(0x7f00000013c0)=""/64, 0x40}], 0x6, &(0x7f00000015c0)=""/177, 0xb1}}, {{&(0x7f0000001680)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000001a00)=""/88, 0x58}}], 0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x4, 0xe, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x700, 0x10, 0x9, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) bind$inet(r2, &(0x7f0000000680)={0x2, 0x4e20, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 4.737525561s ago: executing program 2 (id=1561): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_script(r4, 0x0, 0x0) r5 = dup(r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0xfb7f, 0x0, &(0x7f0000003000/0x4000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x5000, 0x2000, &(0x7f0000001000/0x2000)=nil}) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x280]}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.019026724s ago: executing program 2 (id=1562): bpf$PROG_LOAD(0x5, 0x0, 0x0) semget(0x1, 0x0, 0x43) r0 = semget(0x3, 0x2, 0x284) semctl$GETVAL(r0, 0x0, 0xc, 0x0) r1 = semget(0x1, 0x3, 0x204) semget(0x3, 0x0, 0x654) semctl$IPC_RMID(r1, 0x0, 0x0) semget(0x0, 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058085fe0400aaaaaaaaaabb000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7], 0x68}}, 0x0) 3.897069736s ago: executing program 1 (id=1563): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/19, 0x13}}], 0x1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x27, 0x4, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x104}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3c8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='gadgetfs\x00', 0x1, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2.428204312s ago: executing program 1 (id=1564): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ']:\xd4\\*-'}, {}, {}], 0xa, "a6692609b597e6e5fd716387741aec114c31ad62201705490c9fe9d63270c0d49b9413f546825579bed381f5b0dca87017e0676a6353d9d217573baf4231cd4f8739bb398c90467da319ce97da211ff75f99512ef9513ccbd9bd38d6943b83818ec9e8b200f80449dde839976c3be1cab96f2db408d4d7ecc72d6024040ea69dac9fde7395e547e747135fe8aeb3e75e1323fa49cfd01d47067ce3f038a3b57d755ca4b1b61ae2e3cc69d3dbac4d93507c6e59d5e7cdb3d0afa7415ddd7f4e013647093b3b1b1bd0adf6eb17464dcf31ed11d0b2bde12ec2b7220ea49fa04ab09bb0ebafa155dfd4a60a7735383d35e547"}, 0x105) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r4, 0x703}, 0x14}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x45}, 0x0) 1.621960599s ago: executing program 2 (id=1565): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000880)={'veth1\x00', {0x2, 0x0, @remote}}) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, 0x0, &(0x7f0000000780)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xd0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f00000082c0)={0x2020}, 0x2020) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000580), 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000), 0x0) 1.368738552s ago: executing program 1 (id=1566): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{0x0, 0x0, 0x1000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x4010000bffd) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000100)='./mnt\x00', 0x271) sendfile(r5, r4, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @dev, @val, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {0x0, 0x0, 0x8}}}}}, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/90, 0x5a}, {0x0}], 0x2, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 0s ago: executing program 1 (id=1567): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x2882) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140), 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x80801, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) kernel console output (not intermixed with test programs): tdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1389.510233][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.520284][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.557326][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.752750][T13639] hsr_slave_0: entered promiscuous mode [ 1389.773622][T13639] hsr_slave_1: entered promiscuous mode [ 1389.798461][T13639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.806031][T13639] Cannot create hsr debugfs directory [ 1389.817934][T13441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1389.905493][T13647] hsr_slave_0: entered promiscuous mode [ 1389.946757][T13647] hsr_slave_1: entered promiscuous mode [ 1389.978001][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.985556][T13647] Cannot create hsr debugfs directory [ 1390.453311][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.886878][T10474] Bluetooth: hci1: command tx timeout [ 1390.945665][T13460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.100202][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.107400][ T9931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.327705][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.334895][ T9931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.660566][ T9933] bridge_slave_1: left allmulticast mode [ 1391.677315][ T9933] bridge_slave_1: left promiscuous mode [ 1391.683150][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.721689][ T9933] bridge_slave_0: left allmulticast mode [ 1391.737625][ T9933] bridge_slave_0: left promiscuous mode [ 1391.743321][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.758470][ T9933] bridge_slave_1: left allmulticast mode [ 1391.764104][ T9933] bridge_slave_1: left promiscuous mode [ 1391.823621][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.833211][ T9933] bridge_slave_0: left allmulticast mode [ 1391.854346][ T9933] bridge_slave_0: left promiscuous mode [ 1391.868482][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.609166][ T9933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.677819][ T9933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.743439][ T9933] bond0 (unregistering): Released all slaves [ 1393.057619][ T9933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.088013][ T9933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.107894][ T9933] bond0 (unregistering): Released all slaves [ 1393.132571][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.392654][ T9933] hsr_slave_0: left promiscuous mode [ 1393.427392][ T9933] hsr_slave_1: left promiscuous mode [ 1393.447349][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.467350][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.498185][ T9933] hsr_slave_0: left promiscuous mode [ 1393.517446][ T9933] hsr_slave_1: left promiscuous mode [ 1393.523905][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.549932][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.005861][ T9933] team0 (unregistering): Port device team_slave_1 removed [ 1394.100176][ T9933] team0 (unregistering): Port device team_slave_0 removed [ 1395.001539][ T9933] team0 (unregistering): Port device team_slave_1 removed [ 1395.092940][ T9933] team0 (unregistering): Port device team_slave_0 removed [ 1395.773959][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.955899][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.963129][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.023168][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.030405][ T9931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.582127][T13647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1396.642059][T13647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1396.802304][T13647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1396.883009][T13647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1397.133309][T13460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.693929][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.114892][T13639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1398.182605][T13639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1398.212011][T13639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1398.243752][T13639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1398.311826][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.378854][T13441] veth0_vlan: entered promiscuous mode [ 1398.436075][T13441] veth1_vlan: entered promiscuous mode [ 1398.573591][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.707142][T13460] veth0_vlan: entered promiscuous mode [ 1398.742905][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.750071][ T9931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.808657][T13460] veth1_vlan: entered promiscuous mode [ 1398.840428][ T9933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.847638][ T9933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.988631][T13441] veth0_macvtap: entered promiscuous mode [ 1399.075870][T13441] veth1_macvtap: entered promiscuous mode [ 1399.165949][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.273950][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.288323][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.299827][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.311401][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.339684][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.372634][T13460] veth0_macvtap: entered promiscuous mode [ 1399.414907][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.441160][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.477025][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.517669][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.559733][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.610759][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.651173][T13441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.691394][T13441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.701459][T13441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.733324][T13441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.758120][T13460] veth1_macvtap: entered promiscuous mode [ 1399.844172][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.851400][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.911306][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.918554][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.129125][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.207958][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.269987][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.282545][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.297661][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.353897][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.367433][T13460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.458151][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.528920][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.567439][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.579689][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.606569][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.641944][T13460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.652913][T13460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.666200][T13460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.845419][T13460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.863994][T13460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.884631][T13460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.894219][T13460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.976683][T12297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.008438][T12297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.298486][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.348164][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.419598][T13647] veth0_vlan: entered promiscuous mode [ 1401.541507][T13647] veth1_vlan: entered promiscuous mode [ 1401.565963][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.613260][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.869497][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.882148][ T9933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.897859][ T9933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.933826][ T29] audit: type=1400 audit(1724239800.465:1528): avc: denied { create } for pid=13746 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1401.984490][T13647] veth0_macvtap: entered promiscuous mode [ 1402.020032][T13647] veth1_macvtap: entered promiscuous mode [ 1402.151802][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.196959][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.266973][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.318983][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.341805][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.390757][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.545407][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.600610][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.655611][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.691459][T13639] veth0_vlan: entered promiscuous mode [ 1402.848646][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1402.917209][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.990166][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.056275][ T29] audit: type=1400 audit(1724239801.575:1529): avc: denied { mount } for pid=13753 comm="syz.4.1058" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1403.082432][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.137006][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.219407][ T29] audit: type=1400 audit(1724239801.655:1530): avc: denied { read } for pid=13753 comm="syz.4.1058" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1403.325511][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.416977][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.467021][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.509574][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.627685][T13639] veth1_vlan: entered promiscuous mode [ 1403.685399][T13647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.753760][T13647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.806031][T13647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.576740][T13647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.081580][T13639] veth0_macvtap: entered promiscuous mode [ 1406.190517][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.210979][T13639] veth1_macvtap: entered promiscuous mode [ 1406.238168][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.350071][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.395045][ T29] audit: type=1400 audit(1724239804.925:1531): avc: denied { ioctl } for pid=13782 comm="syz.4.1266" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1406.434910][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 1406.463723][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.519966][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.569943][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.607473][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.862210][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.074904][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.126564][T13788] ptrace attach of "./syz-executor exec"[13460] was attempted by " [ 1407.152763][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.280765][ T9859] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1407.427652][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.495416][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.508797][ T9859] usb 2-1: Using ep0 maxpacket: 16 [ 1407.563436][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.618759][ T9859] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1407.705018][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.740191][ T9859] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 1407.767121][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.811283][ T9859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.816280][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.906551][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.907287][ T9859] usb 2-1: Product: syz [ 1407.973710][ T9859] usb 2-1: Manufacturer: syz [ 1407.998228][ T9859] usb 2-1: SerialNumber: syz [ 1408.004042][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.055692][ T9859] usb 2-1: config 0 descriptor?? [ 1408.081562][ T9859] hub 2-1:0.0: bad descriptor, ignoring hub [ 1408.086280][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.141641][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.141913][ T9859] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1408.221207][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.296104][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.362564][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.454879][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.481376][ T9931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.513014][ T9931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.565558][T13639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.585815][T13639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.646997][T13639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.718646][T13639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.271976][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.311602][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.499132][ T2491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.535983][ T2491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.506048][ T29] audit: type=1400 audit(1724239809.025:1532): avc: denied { create } for pid=13800 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1410.658006][ T29] audit: type=1400 audit(1724239809.035:1533): avc: denied { setopt } for pid=13800 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1410.820522][T13803] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1410.843540][ T5305] usb 2-1: USB disconnect, device number 18 [ 1411.080447][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 1411.128702][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 1411.207311][ T9333] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1411.978234][ T9333] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1412.016919][ T9333] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.079384][ T9333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.172088][ T9333] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.288611][ T9333] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.330830][ T9333] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.419748][ T9333] usb 3-1: Product: syz [ 1412.454919][ T9333] usb 3-1: Manufacturer: syz [ 1412.520351][ T9333] cdc_wdm 3-1:1.0: skipping garbage [ 1412.567438][ T9333] cdc_wdm 3-1:1.0: skipping garbage [ 1412.642357][ T9333] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1412.655454][ T9333] cdc_wdm 3-1:1.0: Unknown control protocol [ 1412.837710][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 1414.187443][T13850] netlink: 'syz.4.1277': attribute type 39 has an invalid length. [ 1414.195272][T13850] netlink: 'syz.4.1277': attribute type 4 has an invalid length. [ 1414.277715][T13850] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1277'. [ 1414.347386][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.499551][T13850] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1414.672194][ T29] audit: type=1400 audit(1724239813.205:1534): avc: denied { shutdown } for pid=13843 comm="syz.4.1277" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1415.826403][ T5273] usb 3-1: USB disconnect, device number 19 [ 1419.662491][ T29] audit: type=1400 audit(1724239814.985:1535): avc: denied { connect } for pid=13871 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1420.288677][T13892] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1421.883411][T13906] syz.4.1285 (13906): drop_caches: 2 [ 1422.338909][T13898] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 1422.417645][ T29] audit: type=1400 audit(1724239820.925:1536): avc: denied { relabelto } for pid=13888 comm="syz.2.1283" name="file0" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 1422.584207][ T29] audit: type=1400 audit(1724239820.945:1537): avc: denied { associate } for pid=13888 comm="syz.2.1283" name="file0" dev="tmpfs" ino=27 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 1423.626202][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.791209][ T29] audit: type=1400 audit(1724239821.445:1538): avc: denied { setopt } for pid=13910 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1423.957912][T13920] cgroup: name respecified [ 1424.012315][ T29] audit: type=1400 audit(1724239822.535:1539): avc: denied { write } for pid=13919 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1424.294657][ T29] audit: type=1400 audit(1724239822.545:1540): avc: denied { nlmsg_read } for pid=13919 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1429.382471][ T29] audit: type=1400 audit(1724239827.915:1541): avc: denied { bind } for pid=13936 comm="syz.1.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1429.434749][ T8715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1429.457553][ T8715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1429.466068][ T8715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1429.475500][ T8715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1429.484024][ T8715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1429.618695][ T8715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1431.501218][ T9931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.697381][ T8715] Bluetooth: hci3: command tx timeout [ 1431.901326][T13939] lo speed is unknown, defaulting to 1000 [ 1433.309221][ T9931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.327130][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 1433.718528][ T9931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.729304][ T29] audit: type=1400 audit(1724239832.255:1542): avc: denied { execute_no_trans } for pid=13973 comm="syz.4.1296" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1433.802309][ T8715] Bluetooth: hci3: command tx timeout [ 1434.130013][ T9931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.849108][ T8715] Bluetooth: hci3: command tx timeout [ 1437.172096][ T29] audit: type=1400 audit(1724239835.705:1543): avc: denied { map } for pid=14010 comm="syz.4.1302" path="socket:[60042]" dev="sockfs" ino=60042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1437.422308][ T29] audit: type=1400 audit(1724239835.705:1544): avc: denied { read } for pid=14010 comm="syz.4.1302" path="socket:[60042]" dev="sockfs" ino=60042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1437.425658][T13939] chnl_net:caif_netlink_parms(): no params data found [ 1438.496424][ T8715] Bluetooth: hci3: command tx timeout [ 1438.566522][ T29] audit: type=1400 audit(1724239836.485:1545): avc: denied { write } for pid=14010 comm="syz.4.1302" path="socket:[60042]" dev="sockfs" ino=60042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1441.482141][ T9931] bridge_slave_1: left allmulticast mode [ 1441.490677][ T9931] bridge_slave_1: left promiscuous mode [ 1441.497614][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.574608][ T9931] bridge_slave_0: left allmulticast mode [ 1441.597711][ T9931] bridge_slave_0: left promiscuous mode [ 1441.602941][ T29] audit: type=1400 audit(1724239840.135:1546): avc: denied { append } for pid=14034 comm="syz.4.1305" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1441.603636][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.780712][ T29] audit: type=1400 audit(1724239840.205:1547): avc: denied { setopt } for pid=14034 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1446.218720][ T9333] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1446.347977][ T9931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.381921][ T9931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.400239][ T9931] bond0 (unregistering): Released all slaves [ 1446.446388][ T9333] usb 2-1: Using ep0 maxpacket: 16 [ 1446.453642][ T9333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1446.490001][T14067] xfrm1: entered allmulticast mode [ 1446.498264][ T9333] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1446.567619][ T9333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.651226][ T9333] usb 2-1: config 0 descriptor?? [ 1446.892796][T13939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.962418][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.991308][T13939] bridge_slave_0: entered allmulticast mode [ 1447.027277][T13939] bridge_slave_0: entered promiscuous mode [ 1447.106111][T13939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.130203][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.161249][T13939] bridge_slave_1: entered allmulticast mode [ 1447.189614][T13939] bridge_slave_1: entered promiscuous mode [ 1447.505335][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.521130][T13939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.595371][ T9931] hsr_slave_0: left promiscuous mode [ 1447.639099][ T9931] hsr_slave_1: left promiscuous mode [ 1447.657919][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.685411][ T9931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.716345][ T9931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.776086][ T9931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.804375][ T9333] hid (null): report_id 0 is invalid [ 1447.820374][ T9333] hid (null): invalid report_size 6778482 [ 1447.872312][ T9931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.887648][ T9333] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 1447.949062][ T9931] veth1_macvtap: left promiscuous mode [ 1447.949373][ T9333] hid-generic 0003:0158:0100.0008: unexpected long global item [ 1447.998092][ T9333] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 1448.013630][ T9931] veth0_macvtap: left promiscuous mode [ 1448.073061][ T9931] veth1_vlan: left promiscuous mode [ 1448.118567][ T9333] usb 2-1: USB disconnect, device number 19 [ 1448.124887][ T9931] veth0_vlan: left promiscuous mode [ 1449.317887][T14097] input: syz1 as /devices/virtual/input/input16 [ 1449.392135][ T29] audit: type=1400 audit(1724239847.925:1548): avc: denied { read } for pid=4654 comm="acpid" name="event4" dev="devtmpfs" ino=2762 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1449.533168][ T29] audit: type=1400 audit(1724239847.925:1549): avc: denied { open } for pid=4654 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2762 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1449.647548][ T29] audit: type=1400 audit(1724239847.925:1550): avc: denied { ioctl } for pid=4654 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2762 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1449.747065][ T29] audit: type=1400 audit(1724239848.205:1551): avc: denied { setopt } for pid=14100 comm="syz.1.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1449.863513][T14104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1449.903641][ T29] audit: type=1400 audit(1724239848.435:1552): avc: denied { listen } for pid=14096 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1449.912317][ T29] audit: type=1400 audit(1724239848.445:1553): avc: denied { accept } for pid=14096 comm="syz.0.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1454.171073][T14116] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1455.117928][ T29] audit: type=1400 audit(1724239853.645:1554): avc: denied { getopt } for pid=14126 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1455.918951][ T29] audit: type=1400 audit(1724239854.445:1555): avc: denied { remount } for pid=14126 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1456.193817][ T9931] team0 (unregistering): Port device team_slave_1 removed [ 1456.538431][ T9931] team0 (unregistering): Port device team_slave_0 removed [ 1457.027088][ T5283] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1457.224653][T14154] ptrace attach of "./syz-executor exec"[13460] was attempted by "./syz-executor exec"[14154] [ 1457.259793][ T5283] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.307847][ T5283] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1457.353004][ T5283] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.384086][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.460999][T14150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1457.513389][ T5283] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.961131][ T5283] usb 3-1: USB disconnect, device number 20 [ 1459.796366][T13939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.001921][T14154] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1460.142679][T13939] team0: Port device team_slave_0 added [ 1460.227478][T13939] team0: Port device team_slave_1 added [ 1460.512843][T14168] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 1461.596140][T13939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.637390][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.376310][T13939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.471935][T13939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.519368][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.545455][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.671482][T13939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.766347][ T29] audit: type=1400 audit(1724239861.295:1556): avc: denied { write } for pid=14181 comm="syz.4.1334" path="socket:[60965]" dev="sockfs" ino=60965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1463.268091][T13939] hsr_slave_0: entered promiscuous mode [ 1463.359987][T13939] hsr_slave_1: entered promiscuous mode [ 1463.497525][T14193] random: crng reseeded on system resumption [ 1465.177882][T14193] Sensor A: ================= START STATUS ================= [ 1465.185485][T14193] Sensor A: Test Pattern: 75% Colorbar [ 1465.387641][T14196] Sensor A: ================= START STATUS ================= [ 1465.392652][T14193] Sensor A: Show Information: All [ 1465.439954][T14193] Sensor A: Vertical Flip: false [ 1465.445101][T14193] Sensor A: Horizontal Flip: false [ 1465.486460][T14193] Sensor A: Brightness: 128 [ 1465.491047][T14193] Sensor A: Contrast: 0 [ 1465.573820][T14193] Sensor A: Hue: 0 [ 1465.585428][T14193] Sensor A: Saturation: 128 [ 1465.634274][T14196] Sensor A: Test Pattern: 75% Colorbar [ 1465.743561][T14193] Sensor A: ================== END STATUS ================== [ 1465.766598][T14196] Sensor A: Show Information: All [ 1465.771688][T14196] Sensor A: Vertical Flip: false [ 1465.776450][ T8715] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1465.788164][ T8715] Bluetooth: hci6: Injecting HCI hardware error event [ 1465.797109][T14196] Sensor A: Horizontal Flip: false [ 1465.801615][T10474] Bluetooth: hci6: hardware error 0x00 [ 1465.815515][T14196] Sensor A: Brightness: 128 [ 1465.915440][T14196] Sensor A: Contrast: 0 [ 1465.919698][T14196] Sensor A: Hue: 0 [ 1465.923430][T14196] Sensor A: Saturation: 128 [ 1465.928091][T14196] Sensor A: ================== END STATUS ================== [ 1466.074928][T14214] sp0: Synchronizing with TNC [ 1466.770898][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 1468.087042][T10474] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1470.899805][T14261] sp0: Synchronizing with TNC [ 1471.649661][T13939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1471.731516][T13939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1471.763348][T13939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1471.800078][T13939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1472.958455][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.086309][ T29] audit: type=1400 audit(1724239871.615:1557): avc: denied { nlmsg_write } for pid=14272 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1473.255204][T13939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.305543][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.312781][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.569304][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.576545][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.884009][T14293] lo speed is unknown, defaulting to 1000 [ 1473.964285][T14290] lo speed is unknown, defaulting to 1000 [ 1477.912004][T13939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1482.508447][T14329] binder: 14327:14329 ioctl 400c620e 0 returned -14 [ 1482.521775][T14329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.562737][ T9333] IPVS: starting estimator thread 0... [ 1482.591173][T13939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.656667][T14332] IPVS: using max 18 ests per chain, 43200 per kthread [ 1482.874929][T14327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.972388][T14345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 1484.169054][T10474] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1484.179845][T10474] Bluetooth: hci1: Injecting HCI hardware error event [ 1484.191267][T10474] Bluetooth: hci1: hardware error 0x00 [ 1485.037054][T14355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14355 comm=syz.1.1359 [ 1485.580215][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.587594][ T29] audit: type=1400 audit(1724239883.595:1558): avc: denied { read } for pid=14351 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1485.635781][T14356] sctp: [Deprecated]: syz.0.1356 (pid 14356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1485.635781][T14356] Use struct sctp_sack_info instead [ 1486.170309][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.170309][T14361] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1486.171885][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.171885][T14361] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1486.171970][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.174090][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.174090][T14361] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1486.174173][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1486.174250][T14361] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1486.174291][T14361] UDF-fs: Scanning with blocksize 512 failed [ 1486.178473][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.178473][T14361] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1486.181225][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.181225][T14361] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1486.181305][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.182158][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.182158][T14361] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1486.182236][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1486.182282][T14361] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1486.182321][T14361] UDF-fs: Scanning with blocksize 1024 failed [ 1486.185076][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.185076][T14361] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1486.185727][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.185727][T14361] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1486.185802][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.186344][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.186344][T14361] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1486.186376][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1486.186404][T14361] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1486.186421][T14361] UDF-fs: Scanning with blocksize 2048 failed [ 1486.187005][T14361] syz.2.1361: attempt to access beyond end of device [ 1486.187005][T14361] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1486.187193][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1486.187865][T14361] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1486.187914][T14361] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1486.187955][T14361] UDF-fs: Scanning with blocksize 4096 failed [ 1486.187991][T14361] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1486.519378][ T29] audit: type=1400 audit(1724239884.685:1559): avc: denied { mounton } for pid=14353 comm="syz.2.1361" path="/18/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1486.542415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.314526][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 1488.790510][T10474] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1490.403319][ T8715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1490.441555][ T8715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1490.482639][ T8715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1490.513407][ T8715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1490.528865][ T8715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1490.539504][ T8715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1490.803955][ T29] audit: type=1400 audit(1724239889.335:1560): avc: denied { bind } for pid=14391 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1490.866528][T14387] lo speed is unknown, defaulting to 1000 [ 1492.646980][T10474] Bluetooth: hci3: command tx timeout [ 1493.154662][ T29] audit: type=1400 audit(1724239891.685:1561): avc: denied { nlmsg_write } for pid=14418 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1493.182312][ T29] audit: type=1400 audit(1724239891.685:1562): avc: denied { getopt } for pid=14418 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1493.843220][T14387] chnl_net:caif_netlink_parms(): no params data found [ 1494.833375][T10474] Bluetooth: hci3: command tx timeout [ 1495.636572][T14445] syz.1.1372(14445): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1496.896379][T10474] Bluetooth: hci3: command tx timeout [ 1500.764992][T10474] Bluetooth: hci3: command tx timeout [ 1500.915486][ T35] bridge_slave_1: left allmulticast mode [ 1500.962423][ T29] audit: type=1804 audit(1724239898.415:1563): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1378" name="/newroot/33/bus/file0" dev="overlay" ino=203 res=1 errno=0 [ 1501.007522][ T35] bridge_slave_1: left promiscuous mode [ 1501.013466][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.682741][ T35] bridge_slave_0: left allmulticast mode [ 1502.762598][ T35] bridge_slave_0: left promiscuous mode [ 1502.887868][T10093] Bluetooth: hci4: command 0x0406 tx timeout [ 1502.914023][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.867725][T14491] sctp: [Deprecated]: syz.1.1383 (pid 14491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1503.867725][T14491] Use struct sctp_sack_info instead [ 1505.297948][ T29] audit: type=1400 audit(1724239903.805:1564): avc: denied { getopt } for pid=14501 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1506.378229][ T29] audit: type=1326 audit(1724239904.155:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1506.705489][ T29] audit: type=1326 audit(1724239904.155:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1506.750536][ T29] audit: type=1326 audit(1724239904.165:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1506.774825][ T29] audit: type=1326 audit(1724239904.175:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1506.867112][ T29] audit: type=1326 audit(1724239904.175:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1507.717102][ T29] audit: type=1326 audit(1724239904.195:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1507.874653][T10093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1507.904609][T10093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1507.912355][ T29] audit: type=1326 audit(1724239904.195:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1507.912423][ T29] audit: type=1326 audit(1724239904.195:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1507.912486][ T29] audit: type=1326 audit(1724239904.205:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1507.912548][ T29] audit: type=1326 audit(1724239904.205:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.2.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1508.016181][T10093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1508.028471][T10093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1508.038401][T10093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1508.045819][T10093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1509.278292][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.382541][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.410495][ T35] bond0 (unregistering): Released all slaves [ 1510.587318][T10093] Bluetooth: hci5: command tx timeout [ 1510.881040][T14529] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1510.953965][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.974870][T14387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.982490][T14529] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1511.067814][T14387] bridge_slave_0: entered allmulticast mode [ 1511.099092][T14387] bridge_slave_0: entered promiscuous mode [ 1511.155813][ T35] hsr_slave_0: left promiscuous mode [ 1511.177536][ T5272] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1511.258767][ T35] hsr_slave_1: left promiscuous mode [ 1511.374550][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.462881][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 1511.477584][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.529197][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.557227][ T5272] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1511.631331][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.725663][ T5272] usb 2-1: config 0 descriptor?? [ 1511.736342][T14542] overlayfs: missing 'lowerdir' [ 1512.500684][ T5272] usbhid 2-1:0.0: can't add hid device: -71 [ 1512.541181][ T5272] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1512.646946][T10093] Bluetooth: hci5: command tx timeout [ 1512.687519][ T5272] usb 2-1: USB disconnect, device number 20 [ 1513.497646][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1513.780481][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1514.727413][T10093] Bluetooth: hci5: command tx timeout [ 1515.792844][T14387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.826423][T14387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.833713][T14387] bridge_slave_1: entered allmulticast mode [ 1515.966385][T14387] bridge_slave_1: entered promiscuous mode [ 1516.206310][T14518] lo speed is unknown, defaulting to 1000 [ 1516.310244][T14387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.719254][T14387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.820436][T10093] Bluetooth: hci5: command tx timeout [ 1516.870126][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 1519.479623][T14578] Bluetooth: MGMT ver 1.23 [ 1524.510784][T14387] team0: Port device team_slave_0 added [ 1524.662842][T14387] team0: Port device team_slave_1 added [ 1527.780735][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1527.780755][ T29] audit: type=1400 audit(1724239925.635:1579): avc: denied { read } for pid=14609 comm="syz.1.1405" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1528.166110][ T29] audit: type=1400 audit(1724239925.635:1580): avc: denied { open } for pid=14609 comm="syz.1.1405" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1528.389150][T14387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.399256][ T29] audit: type=1400 audit(1724239925.795:1581): avc: denied { ioctl } for pid=14609 comm="syz.1.1405" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1528.424128][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.541999][T14387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.593948][ T29] audit: type=1400 audit(1724239927.035:1582): avc: denied { listen } for pid=14603 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1528.688066][T14387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.705427][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.824139][T14387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.882471][T14615] Process accounting resumed [ 1529.068346][T14518] chnl_net:caif_netlink_parms(): no params data found [ 1529.516416][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.810204][T14387] hsr_slave_0: entered promiscuous mode [ 1529.857806][T14387] hsr_slave_1: entered promiscuous mode [ 1529.908723][T14632] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1530.574269][T14637] kvm: pic: non byte read [ 1530.599179][T14637] kvm: pic: non byte read [ 1530.653879][T14637] kvm: pic: non byte read [ 1530.749432][T14637] kvm: pic: non byte read [ 1531.156077][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.191721][ T29] audit: type=1400 audit(1724239929.725:1583): avc: denied { ioctl } for pid=14648 comm="syz.1.1411" path="cgroup:[4026533032]" dev="nsfs" ino=4026533032 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1531.247516][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 1531.623114][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.028384][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.358191][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.416151][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.446980][T14518] bridge_slave_0: entered allmulticast mode [ 1533.476146][T14518] bridge_slave_0: entered promiscuous mode [ 1533.534960][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.577595][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.617672][T14518] bridge_slave_1: entered allmulticast mode [ 1533.639580][T14518] bridge_slave_1: entered promiscuous mode [ 1535.167973][T14684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1535.318958][T14518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.433289][T14518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.400339][T14518] team0: Port device team_slave_0 added [ 1536.462098][T14518] team0: Port device team_slave_1 added [ 1536.496175][ T35] bridge_slave_1: left allmulticast mode [ 1536.508369][ T35] bridge_slave_1: left promiscuous mode [ 1536.515710][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.657327][ T29] audit: type=1400 audit(1724239935.185:1584): avc: denied { write } for pid=14701 comm="syz.4.1420" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1537.470089][ T35] bridge_slave_0: left allmulticast mode [ 1537.475749][ T35] bridge_slave_0: left promiscuous mode [ 1537.514387][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.591518][T14711] x_tables: duplicate underflow at hook 2 [ 1539.138263][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 1541.874561][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.909469][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.921262][ T35] bond0 (unregistering): Released all slaves [ 1542.121845][T14722] lo speed is unknown, defaulting to 1000 [ 1542.386314][T14518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.394468][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.485511][T14518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.532908][T14518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.541959][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.568024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.585660][T14518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.043800][T14518] hsr_slave_0: entered promiscuous mode [ 1543.084694][T14518] hsr_slave_1: entered promiscuous mode [ 1543.117933][T14518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.166333][T14518] Cannot create hsr debugfs directory [ 1543.379986][ T35] hsr_slave_0: left promiscuous mode [ 1543.400560][ T35] hsr_slave_1: left promiscuous mode [ 1543.427527][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.458628][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.479949][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.506439][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.634631][ T35] veth1_macvtap: left promiscuous mode [ 1543.646370][ T35] veth0_macvtap: left promiscuous mode [ 1543.668807][ T35] veth1_vlan: left promiscuous mode [ 1543.674221][ T35] veth0_vlan: left promiscuous mode [ 1543.859430][T10474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1543.878460][T10474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1543.887546][T10474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1543.920795][T10474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1543.935089][T10474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1543.942934][T10474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1545.174499][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1545.260100][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1546.017138][T10474] Bluetooth: hci1: command tx timeout [ 1546.495537][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.862276][T14736] lo speed is unknown, defaulting to 1000 [ 1548.086522][T10474] Bluetooth: hci1: command tx timeout [ 1548.443096][T14736] chnl_net:caif_netlink_parms(): no params data found [ 1548.950229][T14518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1549.001726][T14518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1549.153754][T14518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1549.209834][T14518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1549.280088][T14736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.295699][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.327101][T14736] bridge_slave_0: entered allmulticast mode [ 1549.357729][T14736] bridge_slave_0: entered promiscuous mode [ 1549.379214][T14736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.407578][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.414788][T14736] bridge_slave_1: entered allmulticast mode [ 1549.459515][T14736] bridge_slave_1: entered promiscuous mode [ 1549.817623][T14736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.840914][T14736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.878556][ T9933] bridge_slave_1: left allmulticast mode [ 1549.884240][ T9933] bridge_slave_1: left promiscuous mode [ 1549.906692][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.922307][ T9933] bridge_slave_0: left allmulticast mode [ 1549.936343][ T9933] bridge_slave_0: left promiscuous mode [ 1549.942196][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.176271][T10474] Bluetooth: hci1: command tx timeout [ 1550.255529][ T9933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.289019][ T9933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.310175][ T9933] bond0 (unregistering): Released all slaves [ 1550.573832][T14736] team0: Port device team_slave_0 added [ 1550.588846][T14736] team0: Port device team_slave_1 added [ 1550.628914][ T9933] hsr_slave_0: left promiscuous mode [ 1550.641587][ T9933] hsr_slave_1: left promiscuous mode [ 1550.687940][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.698003][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.319542][ T9933] team0 (unregistering): Port device team_slave_1 removed [ 1551.457572][ T9933] team0 (unregistering): Port device team_slave_0 removed [ 1552.169073][T14736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.176039][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.217187][T14736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.247323][T10474] Bluetooth: hci1: command tx timeout [ 1552.363843][T14736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.391083][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.447645][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.640574][T14736] hsr_slave_0: entered promiscuous mode [ 1552.678238][T14736] hsr_slave_1: entered promiscuous mode [ 1553.076873][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.224803][T14518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.390183][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.397406][T12303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.728107][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.735317][T12303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.855123][T14518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.485448][T14736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1554.567924][T14736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1554.638029][T14518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.646135][T14736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1554.714022][T14736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1555.100186][T14518] veth0_vlan: entered promiscuous mode [ 1555.220571][T14518] veth1_vlan: entered promiscuous mode [ 1555.398295][T14518] veth0_macvtap: entered promiscuous mode [ 1555.428602][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.513788][T14518] veth1_macvtap: entered promiscuous mode [ 1555.613087][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.670288][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.703456][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.733713][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.767862][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.808771][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.836842][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.887028][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.918150][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.949553][T14518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.978490][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.985763][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.024901][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.127335][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.162746][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.206869][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.227808][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.266635][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.328160][T14518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.360718][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.367847][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.430110][T14518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.527764][T14518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.538019][T14518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.557297][T14518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.814195][T14736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1557.023414][T12307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.056154][T12307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.187478][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.195336][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.574878][ T29] audit: type=1400 audit(1724239956.155:1585): avc: denied { setopt } for pid=14849 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1560.462873][T14736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.912177][T14736] veth0_vlan: entered promiscuous mode [ 1560.997746][T14736] veth1_vlan: entered promiscuous mode [ 1561.159426][T14736] veth0_macvtap: entered promiscuous mode [ 1561.231811][T14736] veth1_macvtap: entered promiscuous mode [ 1561.253126][T14863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1382'. [ 1561.350097][T14863] Κό: entered promiscuous mode [ 1561.389365][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.412037][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.452970][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.464370][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.487589][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.501634][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.523508][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.544578][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.567385][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.583579][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.632132][T14736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.661230][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.747553][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.761755][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.773992][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.796425][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.823919][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.835051][T14736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.867654][T14736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.880536][T14736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.955822][T14736] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.987580][T14736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.008748][T14736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.027443][T14736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.340937][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.416456][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.612235][ T9931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.630147][ T9931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.084557][T14877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 1563.964565][ T29] audit: type=1400 audit(1724239962.435:1586): avc: denied { read } for pid=14868 comm="syz.3.1287" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1564.052459][ T29] audit: type=1400 audit(1724239962.435:1587): avc: denied { open } for pid=14868 comm="syz.3.1287" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1565.015547][ T29] audit: type=1326 audit(1724239963.545:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.105314][ T29] audit: type=1326 audit(1724239963.545:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.200470][ T5273] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1565.252250][ T29] audit: type=1326 audit(1724239963.705:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.252779][ T5273] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1565.392154][ T29] audit: type=1326 audit(1724239963.705:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.504273][ T29] audit: type=1326 audit(1724239963.705:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.632160][ T29] audit: type=1326 audit(1724239963.705:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.746450][ T29] audit: type=1326 audit(1724239963.725:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1565.896337][ T29] audit: type=1326 audit(1724239963.815:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1566.036754][ T29] audit: type=1326 audit(1724239963.855:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1566.144098][ T29] audit: type=1326 audit(1724239963.855:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f81f79e79 code=0x7ffc0000 [ 1566.192653][T14900] binder: transaction release 27 bad object at offset 536871616, size 72 [ 1575.463114][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'. [ 1575.682406][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 1575.682421][ T29] audit: type=1400 audit(1724239974.195:1639): avc: denied { nlmsg_read } for pid=14922 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1576.118215][ T29] audit: type=1326 audit(1724239974.655:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.1.1441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa497379e79 code=0x0 [ 1576.389193][ T29] audit: type=1400 audit(1724239974.925:1641): avc: denied { bind } for pid=14928 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1576.482415][ T29] audit: type=1400 audit(1724239974.965:1642): avc: denied { setopt } for pid=14928 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1576.813124][T10093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1576.831180][T14738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1576.840609][T14738] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1576.851516][T14940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1576.861386][T14940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1576.869047][T14940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1576.879198][T14940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1576.918278][T10474] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1576.928473][T10474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1576.929173][T14936] lo speed is unknown, defaulting to 1000 [ 1576.942886][T10474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1576.983826][T10474] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1576.994749][T10474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1579.046536][T10474] Bluetooth: hci7: command tx timeout [ 1579.127348][T10474] Bluetooth: hci3: command tx timeout [ 1580.163987][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.298223][ T29] audit: type=1400 audit(1724239978.825:1643): avc: denied { read } for pid=14947 comm="syz.2.1446" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1580.488521][ T29] audit: type=1400 audit(1724239978.835:1644): avc: denied { open } for pid=14947 comm="syz.2.1446" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1580.624693][ T29] audit: type=1400 audit(1724239978.985:1645): avc: denied { lock } for pid=14947 comm="syz.2.1446" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1580.788269][T14940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1580.800555][T14940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1580.808825][T14940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1580.816991][T14940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1580.824513][T14940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1580.831854][T14940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1580.949474][T14938] lo speed is unknown, defaulting to 1000 [ 1581.052456][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.126536][T10474] Bluetooth: hci7: command tx timeout [ 1581.218941][T10474] Bluetooth: hci3: command tx timeout [ 1581.391091][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.537436][T14960] lo speed is unknown, defaulting to 1000 [ 1581.641698][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.653556][ T9860] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1581.856995][ T9860] usb 3-1: Using ep0 maxpacket: 16 [ 1581.899031][ T9860] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1582.043274][T14936] chnl_net:caif_netlink_parms(): no params data found [ 1582.069674][ T9860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1582.101339][ T9860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.153077][ T9860] usb 3-1: Product: syz [ 1582.187413][ T9860] usb 3-1: Manufacturer: syz [ 1582.201810][ T9860] usb 3-1: SerialNumber: syz [ 1582.250881][ T9860] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1582.945176][T14975] futex_wake_op: syz.2.1449 tries to shift op by 36; fix this program [ 1583.358374][T10474] Bluetooth: hci1: command tx timeout [ 1583.365562][T10474] Bluetooth: hci7: command tx timeout [ 1583.373068][T10474] Bluetooth: hci3: command tx timeout [ 1583.980457][ T35] bridge_slave_1: left allmulticast mode [ 1584.049309][ T35] bridge_slave_1: left promiscuous mode [ 1584.087061][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.141835][ T35] bridge_slave_0: left allmulticast mode [ 1584.175118][ T35] bridge_slave_0: left promiscuous mode [ 1584.198706][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.528444][T14940] Bluetooth: hci1: command tx timeout [ 1585.606378][T14940] Bluetooth: hci3: command tx timeout [ 1585.607363][T10474] Bluetooth: hci7: command tx timeout [ 1585.739130][ T29] audit: type=1400 audit(1724239984.275:1646): avc: denied { connect } for pid=14982 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1585.857144][ T29] audit: type=1400 audit(1724239984.305:1647): avc: denied { name_connect } for pid=14982 comm="syz.1.1451" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1586.113902][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.161334][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.201572][ T35] bond0 (unregistering): Released all slaves [ 1586.251568][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.277630][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.328358][T14936] bridge_slave_0: entered allmulticast mode [ 1586.396651][T14936] bridge_slave_0: entered promiscuous mode [ 1586.522951][ T9860] usb 3-1: USB disconnect, device number 21 [ 1586.823614][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.865086][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.893085][T14936] bridge_slave_1: entered allmulticast mode [ 1586.944137][T14936] bridge_slave_1: entered promiscuous mode [ 1587.352884][T14938] chnl_net:caif_netlink_parms(): no params data found [ 1587.448688][T14936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.528306][ T29] audit: type=1400 audit(1724239986.075:1648): avc: denied { ioctl } for pid=14994 comm="syz.2.1453" path="socket:[64421]" dev="sockfs" ino=64421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1587.594615][T14936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.617155][T10474] Bluetooth: hci1: command tx timeout [ 1588.172994][T14936] team0: Port device team_slave_0 added [ 1588.213723][T14936] team0: Port device team_slave_1 added [ 1588.457603][ T29] audit: type=1400 audit(1724239986.985:1649): avc: denied { module_load } for pid=15003 comm="syz.2.1454" path="/sys/kernel/fscaps" dev="sysfs" ino=1362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1588.606834][ T35] hsr_slave_0: left promiscuous mode [ 1588.644514][ T35] hsr_slave_1: left promiscuous mode [ 1588.676951][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.684425][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.729517][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.741351][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.905847][ T35] veth1_macvtap: left promiscuous mode [ 1588.911449][ T35] veth0_macvtap: left promiscuous mode [ 1588.981259][ T35] veth1_vlan: left promiscuous mode [ 1589.006095][ T35] veth0_vlan: left promiscuous mode [ 1593.152724][T10474] Bluetooth: hci1: command tx timeout [ 1594.524089][ T29] audit: type=1400 audit(1724239993.028:1650): avc: denied { read } for pid=15012 comm="syz.1.1456" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1594.657574][ T29] audit: type=1400 audit(1724239993.028:1651): avc: denied { open } for pid=15012 comm="syz.1.1456" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1594.781168][ T29] audit: type=1400 audit(1724239993.038:1652): avc: denied { ioctl } for pid=15012 comm="syz.1.1456" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1595.054100][T15020] futex_wake_op: syz.1.1457 tries to shift op by 32; fix this program [ 1597.067028][T15026] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1597.067028][T15026] program syz.2.1458 not setting count and/or reply_len properly [ 1598.549701][ T29] audit: type=1400 audit(1724239997.000:1653): avc: denied { block_suspend } for pid=15025 comm="syz.1.1459" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1598.741338][T15026] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1598.741338][T15026] program syz.2.1458 not setting count and/or reply_len properly [ 1601.304062][ T29] audit: type=1400 audit(1724239999.852:1654): avc: denied { read } for pid=15038 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1601.353387][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1601.424124][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1603.139837][T14960] chnl_net:caif_netlink_parms(): no params data found [ 1603.188071][T14936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.198428][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.224504][T14936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.440803][T14936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.468784][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.517193][T14936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.570019][ T29] audit: type=1400 audit(1724240002.123:1655): avc: denied { wake_alarm } for pid=15051 comm="syz.2.1463" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1603.878799][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1605.485709][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1605.528226][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1605.600741][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1605.610547][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1605.618861][ T9] usb 3-1: SerialNumber: syz [ 1605.636648][T15053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1605.659397][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.668359][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.676898][T14938] bridge_slave_0: entered allmulticast mode [ 1605.685336][T14938] bridge_slave_0: entered promiscuous mode [ 1605.759629][T14936] hsr_slave_0: entered promiscuous mode [ 1605.788922][T14936] hsr_slave_1: entered promiscuous mode [ 1606.067054][T15053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1606.099313][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.106554][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.189837][T14938] bridge_slave_1: entered allmulticast mode [ 1606.248090][T14938] bridge_slave_1: entered promiscuous mode [ 1606.496423][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.514598][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.534590][T14960] bridge_slave_0: entered allmulticast mode [ 1606.560054][T14960] bridge_slave_0: entered promiscuous mode [ 1606.658785][T14938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.718763][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.748973][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.759556][T14960] bridge_slave_1: entered allmulticast mode [ 1606.781829][T14960] bridge_slave_1: entered promiscuous mode [ 1606.802451][T14938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.831741][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1606.908157][ T9] usb 3-1: USB disconnect, device number 22 [ 1607.497959][T14938] team0: Port device team_slave_0 added [ 1607.578290][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.612351][T14938] team0: Port device team_slave_1 added [ 1607.753814][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.921880][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.401161][T14960] team0: Port device team_slave_0 added [ 1609.056920][T14938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.063869][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.285416][T14938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.469274][ T29] audit: type=1400 audit(1724240007.996:1656): avc: denied { name_bind } for pid=15091 comm="syz.2.1468" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1609.661738][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.870492][T14960] team0: Port device team_slave_1 added [ 1610.000657][T14938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.028077][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.256889][T14938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.363927][ T29] audit: type=1326 audit(1724240008.906:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1610.434947][ T29] audit: type=1326 audit(1724240008.946:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1610.546112][ T29] audit: type=1326 audit(1724240008.946:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1610.606612][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.638641][ T29] audit: type=1326 audit(1724240008.946:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1610.727936][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.774734][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.816274][ T29] audit: type=1326 audit(1724240008.946:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1610.919628][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.938474][ T29] audit: type=1326 audit(1724240008.946:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1611.040583][ T29] audit: type=1326 audit(1724240008.946:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1611.224365][ T29] audit: type=1326 audit(1724240008.946:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1611.325644][ T29] audit: type=1326 audit(1724240008.956:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15099 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1611.358026][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.455208][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.455230][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.455261][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.845569][T15117] kAFS: unable to lookup cell '' [ 1611.933753][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.056511][T14938] hsr_slave_0: entered promiscuous mode [ 1612.075629][T14938] hsr_slave_1: entered promiscuous mode [ 1612.076621][T14938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1612.076708][T14938] Cannot create hsr debugfs directory [ 1612.692245][T14960] hsr_slave_0: entered promiscuous mode [ 1612.731604][T14960] hsr_slave_1: entered promiscuous mode [ 1612.773063][T14960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1612.811561][T14960] Cannot create hsr debugfs directory [ 1613.629330][T15134] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1474'. [ 1614.404286][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.318516][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.608654][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.756493][ T9860] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1615.856194][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.021219][ T9860] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 1616.054742][ T9860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.141003][ T9860] usb 2-1: config 0 descriptor?? [ 1616.194572][ T9860] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1618.229122][ T35] bridge_slave_1: left allmulticast mode [ 1618.251056][ T35] bridge_slave_1: left promiscuous mode [ 1618.256883][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.293768][ T9333] usb 2-1: USB disconnect, device number 21 [ 1618.349551][ T35] bridge_slave_0: left allmulticast mode [ 1618.381290][ T35] bridge_slave_0: left promiscuous mode [ 1618.387110][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.482964][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 1618.929290][ T35] bridge_slave_1: left allmulticast mode [ 1618.935394][ T35] bridge_slave_1: left promiscuous mode [ 1618.950904][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.972712][ T35] bridge_slave_0: left allmulticast mode [ 1618.978404][ T35] bridge_slave_0: left promiscuous mode [ 1618.984895][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.154532][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.207755][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.220954][ T35] bond0 (unregistering): Released all slaves [ 1621.524554][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.554163][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.583854][ T35] bond0 (unregistering): Released all slaves [ 1621.958460][ T35] Κό: left promiscuous mode [ 1622.374462][T15190] input: syz0 as /devices/virtual/input/input17 [ 1625.566869][ T35] hsr_slave_0: left promiscuous mode [ 1625.572939][ T35] hsr_slave_1: left promiscuous mode [ 1625.617520][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.645152][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.652959][T15223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1625.666553][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1625.700529][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.906620][ T35] hsr_slave_0: left promiscuous mode [ 1625.926585][ T35] hsr_slave_1: left promiscuous mode [ 1625.935249][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.943801][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.877512][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.061045][ T35] veth1_macvtap: left promiscuous mode [ 1627.077549][ T35] veth0_macvtap: left promiscuous mode [ 1627.096085][ T35] veth1_vlan: left promiscuous mode [ 1627.127757][ T35] veth0_vlan: left promiscuous mode [ 1627.154962][ T35] veth1_macvtap: left promiscuous mode [ 1627.180546][ T35] veth0_macvtap: left promiscuous mode [ 1627.198028][ T35] veth1_vlan: left promiscuous mode [ 1627.217598][ T35] veth0_vlan: left promiscuous mode [ 1627.819206][T15237] x_tables: duplicate underflow at hook 3 [ 1628.616959][T15246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1628.623565][T15246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1628.677503][T15244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1628.734387][T15246] vhci_hcd vhci_hcd.0: Device attached [ 1628.792894][T15249] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1628.887075][T15244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1628.926283][ T9860] vhci_hcd: vhci_device speed not set [ 1629.076626][ T9860] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 1629.248254][T15247] vhci_hcd: connection reset by peer [ 1629.255251][ T1294] vhci_hcd: stop threads [ 1629.286130][ T1294] vhci_hcd: release socket [ 1629.316300][ T1294] vhci_hcd: disconnect device [ 1629.945592][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1630.077222][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1632.133190][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1632.310125][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1633.573320][T14936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1633.600146][T14936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1633.626452][T14936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1633.689902][T14936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1635.679864][ T9860] vhci_hcd: vhci_device speed not set [ 1635.826481][T14938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1637.565525][T14960] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1638.065033][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1638.065054][ T29] audit: type=1400 audit(1724240036.620:1696): avc: denied { watch } for pid=15271 comm="syz.2.1498" path="/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1638.395062][ T29] audit: type=1400 audit(1724240036.950:1697): avc: denied { read } for pid=15271 comm="syz.2.1498" path="socket:[67506]" dev="sockfs" ino=67506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1638.803242][T14940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1638.838963][T14940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1638.847974][T14940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1638.856463][T14940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1638.865003][T14940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1638.872595][T14940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1640.155808][T10474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1640.180450][T10474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1640.202015][T10474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1640.219526][T10474] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1640.240179][T10474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1640.253515][T10474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1640.361646][T10474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1640.373775][T10474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1640.395938][T10474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1640.413262][T10474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1640.431365][T10474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1640.450416][T10474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1640.893027][ T5283] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1640.966877][T15276] lo speed is unknown, defaulting to 1000 [ 1641.032599][T10474] Bluetooth: hci3: command tx timeout [ 1641.308819][T15297] lo speed is unknown, defaulting to 1000 [ 1641.390523][T15287] lo speed is unknown, defaulting to 1000 [ 1645.503137][T10474] Bluetooth: hci5: command tx timeout [ 1645.503258][T14940] Bluetooth: hci1: command tx timeout [ 1645.510578][T10474] Bluetooth: hci3: command tx timeout [ 1645.696693][ T29] audit: type=1400 audit(1724240044.264:1698): avc: denied { sqpoll } for pid=15314 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1645.771584][T15315] overlayfs: missing 'lowerdir' [ 1645.952756][ T29] audit: type=1400 audit(1724240044.304:1699): avc: denied { watch } for pid=15314 comm="syz.1.1502" path="/325/net_prio.prioidx" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1646.058105][ T29] audit: type=1400 audit(1724240044.304:1700): avc: denied { watch_sb } for pid=15314 comm="syz.1.1502" path="/325/net_prio.prioidx" dev="tmpfs" ino=1793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1646.073678][T15276] chnl_net:caif_netlink_parms(): no params data found [ 1646.362807][ T5305] libceph: connect (1)[c::]:6789 error -22 [ 1646.389054][ T5305] libceph: mon0 (1)[c::]:6789 connect error [ 1646.712602][ T5305] libceph: connect (1)[c::]:6789 error -22 [ 1646.761362][ T5305] libceph: mon0 (1)[c::]:6789 connect error [ 1647.050976][T15326] ceph: No mds server is up or the cluster is laggy [ 1647.576688][T10474] Bluetooth: hci3: command tx timeout [ 1647.582139][T10474] Bluetooth: hci1: command tx timeout [ 1647.589198][T10093] Bluetooth: hci5: command tx timeout [ 1648.359875][T15276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.567140][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.587273][T15276] bridge_slave_0: entered allmulticast mode [ 1648.598622][T15276] bridge_slave_0: entered promiscuous mode [ 1648.615065][T15276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.637267][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.682778][T15276] bridge_slave_1: entered allmulticast mode [ 1648.735205][T15276] bridge_slave_1: entered promiscuous mode [ 1648.881148][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 1649.471667][T15297] chnl_net:caif_netlink_parms(): no params data found [ 1649.535170][T15276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.637951][T15276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.666760][T10474] Bluetooth: hci5: command tx timeout [ 1649.672214][T10474] Bluetooth: hci3: command tx timeout [ 1649.678763][T14940] Bluetooth: hci1: command tx timeout [ 1650.859218][T15287] chnl_net:caif_netlink_parms(): no params data found [ 1651.030507][T15276] team0: Port device team_slave_0 added [ 1651.257974][T15276] team0: Port device team_slave_1 added [ 1651.734353][T14940] Bluetooth: hci1: command tx timeout [ 1651.739811][T14940] Bluetooth: hci5: command tx timeout [ 1653.146369][T15400] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1653.491334][T15399] lo speed is unknown, defaulting to 1000 [ 1653.866803][T15276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.883613][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.910215][T15276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.120177][T15276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.148008][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.255026][T15276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.320354][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.339211][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.368756][T15297] bridge_slave_0: entered allmulticast mode [ 1654.396290][T15297] bridge_slave_0: entered promiscuous mode [ 1654.814759][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.824090][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.848595][T15297] bridge_slave_1: entered allmulticast mode [ 1654.885832][T15297] bridge_slave_1: entered promiscuous mode [ 1655.623068][T15287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.653784][T15287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.883446][T15287] bridge_slave_0: entered allmulticast mode [ 1655.891241][T15287] bridge_slave_0: entered promiscuous mode [ 1655.956631][T15287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.968550][T15287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.979275][T15287] bridge_slave_1: entered allmulticast mode [ 1655.997711][T15287] bridge_slave_1: entered promiscuous mode [ 1657.135568][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.478647][T15276] hsr_slave_0: entered promiscuous mode [ 1658.151882][T15276] hsr_slave_1: entered promiscuous mode [ 1658.202027][T15276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.209623][T15276] Cannot create hsr debugfs directory [ 1658.486706][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.744568][T15436] overlay: filesystem on ./bus not supported [ 1659.031782][T15287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.084238][T15287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.267699][T15297] team0: Port device team_slave_0 added [ 1660.036254][T15297] team0: Port device team_slave_1 added [ 1660.161721][T15287] team0: Port device team_slave_0 added [ 1660.175397][T15287] team0: Port device team_slave_1 added [ 1664.902373][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.969552][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.144821][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.309326][T15287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.339582][T15287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.395210][T15287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.444630][T15287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.467441][T15287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.578816][T15287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.609403][ T5273] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1665.710069][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.747630][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.794822][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.858897][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 1665.882973][ T5273] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1665.914460][ T5273] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1665.978229][ T5273] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1666.016657][ T5273] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1666.067713][ T5273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1666.120594][ T5273] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1666.155952][ T5273] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1666.326331][ T5273] usb 3-1: Product: syz [ 1666.353888][ T5273] usb 3-1: Manufacturer: syz [ 1666.362491][ T5273] usb 3-1: SerialNumber: syz [ 1667.961801][T15287] hsr_slave_0: entered promiscuous mode [ 1667.990858][ T5273] usb 3-1: config 0 descriptor?? [ 1668.013478][T15287] hsr_slave_1: entered promiscuous mode [ 1668.020393][T15287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.029665][T15287] Cannot create hsr debugfs directory [ 1668.031337][ T5273] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1668.206425][ T5273] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1668.443228][ T5273] usb 3-1: USB disconnect, device number 23 [ 1669.334391][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.007333][ T5273] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1670.386618][T15297] hsr_slave_0: entered promiscuous mode [ 1670.419128][T15297] hsr_slave_1: entered promiscuous mode [ 1670.456201][T15297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1670.463788][T15297] Cannot create hsr debugfs directory [ 1674.145629][T15560] binder: 15557:15560 ioctl c0306201 20000280 returned -11 [ 1676.253236][ T35] bridge_slave_1: left allmulticast mode [ 1676.298914][ T35] bridge_slave_1: left promiscuous mode [ 1676.360687][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.434020][ T35] bridge_slave_0: left allmulticast mode [ 1676.465953][ T35] bridge_slave_0: left promiscuous mode [ 1676.485524][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.664891][ T35] bridge_slave_1: left allmulticast mode [ 1676.670542][ T35] bridge_slave_1: left promiscuous mode [ 1676.721966][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.746357][ T35] bridge_slave_0: left allmulticast mode [ 1676.760563][ T35] bridge_slave_0: left promiscuous mode [ 1676.769749][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.791432][ T35] bridge_slave_1: left allmulticast mode [ 1676.802889][ T35] bridge_slave_1: left promiscuous mode [ 1676.809034][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.824949][ T35] bridge_slave_0: left allmulticast mode [ 1676.952269][ T35] bridge_slave_0: left promiscuous mode [ 1676.958077][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.912559][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.963251][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.011884][ T35] bond0 (unregistering): Released all slaves [ 1680.068959][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.121840][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.154561][ T35] bond0 (unregistering): Released all slaves [ 1680.233721][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.311637][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.036024][ T35] bond0 (unregistering): Released all slaves [ 1687.162042][ T35] hsr_slave_0: left promiscuous mode [ 1687.257623][ T35] hsr_slave_1: left promiscuous mode [ 1687.313421][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.387546][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.017391][ T35] hsr_slave_0: left promiscuous mode [ 1688.059873][ T35] hsr_slave_1: left promiscuous mode [ 1688.120286][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.183011][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.413813][ T35] hsr_slave_0: left promiscuous mode [ 1688.439260][T15637] bio_check_eod: 2 callbacks suppressed [ 1688.439274][T15637] syz.1.1541: attempt to access beyond end of device [ 1688.439274][T15637] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1688.487091][ T35] hsr_slave_1: left promiscuous mode [ 1688.589721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.598297][T15637] efs: cannot read volume header [ 1688.627473][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1690.761181][ T29] audit: type=1400 audit(1724240089.347:1701): avc: denied { ioctl } for pid=15639 comm="syz.2.1543" path="socket:[68087]" dev="sockfs" ino=68087 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1690.987525][T15651] overlayfs: missing 'lowerdir' [ 1691.984815][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1692.175956][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1693.665069][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1693.800489][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1695.107388][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1695.186530][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1696.638242][ T29] audit: type=1400 audit(1724240095.230:1702): avc: denied { read } for pid=15691 comm="syz.1.1549" lport=54731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1697.363246][T10474] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1697.428001][T10474] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1697.447766][T10474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1697.459374][T10474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1697.468689][T10474] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1697.476267][T10474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1697.628845][T10474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1697.640250][T10474] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1697.649010][T10474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1697.659617][T10474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1697.667466][T10474] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1697.674804][T10474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1697.873955][T15707] lo speed is unknown, defaulting to 1000 [ 1697.909012][T15703] lo speed is unknown, defaulting to 1000 [ 1700.820076][T10474] Bluetooth: hci6: command tx timeout [ 1700.820129][T14940] Bluetooth: hci7: command tx timeout [ 1701.247515][ T29] audit: type=1326 audit(1724240099.842:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1701.607602][ T29] audit: type=1326 audit(1724240099.852:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.008621][T14940] Bluetooth: hci6: command tx timeout [ 1703.009537][T10474] Bluetooth: hci7: command tx timeout [ 1703.197088][ T29] audit: type=1326 audit(1724240099.872:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.252686][T15748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.383049][ T29] audit: type=1326 audit(1724240099.872:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.522529][ T29] audit: type=1326 audit(1724240099.872:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.559877][ T5283] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1703.571076][T15748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.602746][ T29] audit: type=1326 audit(1724240099.902:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.627418][T14940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1703.640506][T14940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1703.649553][T14940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1703.679924][T14940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1703.687638][T14940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1703.695674][T14940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1703.771891][ T5283] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1703.811183][ T5283] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1703.829606][ T29] audit: type=1326 audit(1724240099.942:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1703.981843][ T5283] usb 2-1: string descriptor 0 read error: -22 [ 1703.989629][ T5283] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 1704.014161][ T29] audit: type=1326 audit(1724240099.942:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1704.039383][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.112715][ T29] audit: type=1326 audit(1724240099.992:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1704.131237][ T5283] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1704.280082][ T29] audit: type=1326 audit(1724240099.992:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1704.390862][ T29] audit: type=1326 audit(1724240099.992:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15734 comm="syz.2.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fddb2f79e79 code=0x7ffc0000 [ 1704.580368][ T5283] usb 2-1: USB disconnect, device number 22 [ 1704.674992][T15752] lo speed is unknown, defaulting to 1000 [ 1704.781343][T15703] chnl_net:caif_netlink_parms(): no params data found [ 1705.068133][T14940] Bluetooth: hci7: command tx timeout [ 1705.077693][T14940] Bluetooth: hci6: command tx timeout [ 1705.807862][T14940] Bluetooth: hci1: command tx timeout [ 1706.593593][ T29] audit: type=1400 audit(1724240105.185:1714): avc: denied { connect } for pid=15775 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1707.206548][T14940] Bluetooth: hci6: command tx timeout [ 1707.211965][T10474] Bluetooth: hci7: command tx timeout [ 1707.416639][T15778] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1707.425532][T15778] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1707.446359][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.470759][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.559048][T15703] bridge_slave_0: entered allmulticast mode [ 1707.597653][T15703] bridge_slave_0: entered promiscuous mode [ 1707.629378][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.649890][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.679711][T15703] bridge_slave_1: entered allmulticast mode [ 1707.707428][T15703] bridge_slave_1: entered promiscuous mode [ 1707.866325][T14940] Bluetooth: hci1: command tx timeout [ 1707.878513][T15707] chnl_net:caif_netlink_parms(): no params data found [ 1707.947289][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.971023][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.579020][T15703] team0: Port device team_slave_0 added [ 1708.604955][T15703] team0: Port device team_slave_1 added [ 1708.900964][T15752] chnl_net:caif_netlink_parms(): no params data found [ 1709.113235][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.121646][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.156830][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.170769][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.186108][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.226179][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.489254][T15707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.515801][T15707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.524710][T15707] bridge_slave_0: entered allmulticast mode [ 1709.558457][T15707] bridge_slave_0: entered promiscuous mode [ 1709.865123][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1709.865142][ T29] audit: type=1400 audit(1724240108.456:1716): avc: denied { mount } for pid=15799 comm="syz.1.1563" name="/" dev="gadgetfs" ino=69666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1709.950387][T14940] Bluetooth: hci1: command tx timeout [ 1710.041711][T15707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.053784][T15707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.084639][T15707] bridge_slave_1: entered allmulticast mode [ 1710.107079][T15707] bridge_slave_1: entered promiscuous mode [ 1710.259186][ T35] bridge_slave_1: left allmulticast mode [ 1710.286069][ T35] bridge_slave_1: left promiscuous mode [ 1710.324726][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.380850][ T35] bridge_slave_0: left allmulticast mode [ 1710.415857][ T35] bridge_slave_0: left promiscuous mode [ 1710.446917][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.000424][ T29] audit: type=1400 audit(1724240109.597:1717): avc: denied { unmount } for pid=9686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1711.020244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1711.051266][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.097866][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.159185][ T35] bond0 (unregistering): Released all slaves [ 1711.566654][T15703] hsr_slave_0: entered promiscuous mode [ 1711.609541][T15703] hsr_slave_1: entered promiscuous mode [ 1711.766955][T15707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.897118][T15707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.024378][T14940] Bluetooth: hci1: command tx timeout [ 1712.075112][ T35] hsr_slave_0: left promiscuous mode [ 1712.156311][ T35] hsr_slave_1: left promiscuous mode [ 1712.195416][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.233973][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.404626][ T29] audit: type=1400 audit(1724240111.007:1718): avc: denied { mounton } for pid=15830 comm="syz.1.1566" path="mnt:[4026532895]" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1712.967304][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1713.194326][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1730.740793][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1818.730634][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1818.737625][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15536/1:b..l [ 1818.746210][ C1] rcu: (detected by 1, t=10502 jiffies, g=161277, q=719 ncpus=2) [ 1818.753998][ C1] task:kworker/u8:9 state:R running task stack:24272 pid:15536 tgid:15536 ppid:2 flags:0x00004000 [ 1818.766922][ C1] Workqueue: bat_events batadv_nc_worker [ 1818.772561][ C1] Call Trace: [ 1818.775823][ C1] [ 1818.778735][ C1] __schedule+0xe37/0x5490 [ 1818.783143][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1818.787892][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1818.792658][ C1] ? __pfx___schedule+0x10/0x10 [ 1818.797492][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1818.802243][ C1] ? mark_held_locks+0x9f/0xe0 [ 1818.806992][ C1] preempt_schedule_irq+0x51/0x90 [ 1818.812020][ C1] irqentry_exit+0x36/0x90 [ 1818.816423][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1818.822385][ C1] RIP: 0010:kasan_check_range+0xfb/0x1a0 [ 1818.828007][ C1] Code: d2 74 1e 41 83 e2 07 49 39 d1 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 a1 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc <48> 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 [ 1818.847603][ C1] RSP: 0018:ffffc90003b0faa8 EFLAGS: 00000283 [ 1818.853655][ C1] RAX: fffffbfff2025eab RBX: fffffbfff2025eac RCX: ffffffff81686ad9 [ 1818.861614][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff9012f558 [ 1818.869567][ C1] RBP: fffffbfff2025eab R08: 0000000000000000 R09: fffffbfff2025eab [ 1818.877519][ C1] R10: ffffffff9012f55f R11: 0000000000000000 R12: ffffffff8ddb5be0 [ 1818.885473][ C1] R13: 000000000003db0c R14: 000000000003db0c R15: dffffc0000000000 [ 1818.893430][ C1] ? lock_release+0xa9/0x6f0 [ 1818.898010][ C1] lock_release+0xa9/0x6f0 [ 1818.902413][ C1] ? batadv_nc_worker+0x887/0x1060 [ 1818.907517][ C1] ? __pfx_lock_release+0x10/0x10 [ 1818.912526][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1818.917710][ C1] batadv_nc_worker+0x88c/0x1060 [ 1818.922639][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1818.928015][ C1] ? __pfx_lock_release+0x10/0x10 [ 1818.933027][ C1] process_one_work+0x9c5/0x1b40 [ 1818.937958][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1818.943322][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1818.948678][ C1] ? assign_work+0x1a0/0x250 [ 1818.953253][ C1] worker_thread+0x6c8/0xf20 [ 1818.957832][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1818.962931][ C1] kthread+0x2c1/0x3a0 [ 1818.966981][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1818.972166][ C1] ? __pfx_kthread+0x10/0x10 [ 1818.976739][ C1] ret_from_fork+0x45/0x80 [ 1818.981146][ C1] ? __pfx_kthread+0x10/0x10 [ 1818.985723][ C1] ret_from_fork_asm+0x1a/0x30 [ 1818.990476][ C1] [ 1818.993494][ C1] rcu: rcu_preempt kthread starved for 9972 jiffies! g161277 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1819.004669][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1819.014615][ C1] rcu: RCU grace-period kthread stack dump: [ 1819.020500][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1819.032222][ C1] Call Trace: [ 1819.035569][ C1] [ 1819.038496][ C1] __schedule+0xe37/0x5490 [ 1819.042906][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1819.048091][ C1] ? __pfx___schedule+0x10/0x10 [ 1819.052927][ C1] ? schedule+0x298/0x350 [ 1819.057240][ C1] ? __pfx_lock_release+0x10/0x10 [ 1819.062256][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1819.067182][ C1] ? lock_acquire+0x1b1/0x560 [ 1819.071843][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1819.077303][ C1] schedule+0xe7/0x350 [ 1819.081387][ C1] schedule_timeout+0x136/0x2a0 [ 1819.086235][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1819.091597][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1819.096869][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1819.102666][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1819.108118][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1819.112870][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1819.118139][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1819.122807][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1819.127995][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1819.133791][ C1] rcu_gp_kthread+0x271/0x380 [ 1819.138454][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1819.143638][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1819.148824][ C1] ? __kthread_parkme+0x148/0x220 [ 1819.153842][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1819.159039][ C1] kthread+0x2c1/0x3a0 [ 1819.163093][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1819.168277][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.172849][ C1] ret_from_fork+0x45/0x80 [ 1819.177277][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.181851][ C1] ret_from_fork_asm+0x1a/0x30 [ 1819.186604][ C1] [ 1819.189605][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1819.195916][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1819.201119][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1819.810325][T10093] Bluetooth: hci6: command 0x0406 tx timeout [ 1819.816505][T10093] Bluetooth: hci7: command 0x0406 tx timeout