last executing test programs: 48.347344339s ago: executing program 0 (id=278): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0xfefd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x3, 0xd4bd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 45.813424223s ago: executing program 0 (id=271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8f7117486690059f) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x18, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000003c0)={0x50000008}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) lstat(&(0x7f0000000380)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000400)='./cgroup/../file0\x00', &(0x7f0000000280)='./cgroup/../file0\x00', &(0x7f0000000340), 0x20100a6, &(0x7f0000000440)=ANY=[]) setresgid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 44.492211754s ago: executing program 0 (id=273): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb91a00}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xb7240, &(0x7f0000000100)=""/147, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) 43.179772834s ago: executing program 0 (id=274): r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000002e00), &(0x7f0000002e40)={'L-', 0x4}, 0x16, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/186}, {&(0x7f0000000340)=""/149}, {&(0x7f0000000100)=""/45}, {&(0x7f0000000900)=""/4096}, {&(0x7f0000000400)=""/20}, {&(0x7f0000000440)=""/178}], 0x0, &(0x7f0000000580)=""/239}, 0xdf2a}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/249}, {&(0x7f0000000800)=""/97}, {&(0x7f0000001900)=""/226}, {&(0x7f0000001a00)=""/129}], 0x0, &(0x7f0000001ac0)=""/75}, 0x1}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/198}], 0x0, &(0x7f0000001d00)=""/142}, 0x7}, {{&(0x7f0000001dc0)=@l2tp={0x2, 0x0, @empty}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/165}]}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/134}, {&(0x7f0000002080)=""/98}, {&(0x7f0000002100)=""/157}], 0x0, &(0x7f0000002200)=""/120}, 0x1}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/229}, {&(0x7f0000002380)=""/26}], 0x0, &(0x7f0000002400)=""/104}, 0x4}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002480)=""/42}, {&(0x7f00000024c0)=""/111}], 0x0, &(0x7f0000002580)=""/179}, 0xe4a}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002640)=""/87}]}, 0x3f}, {{&(0x7f0000002700)=@generic, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)=""/16}, {&(0x7f00000027c0)=""/152}, {&(0x7f0000002880)=""/10}]}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/145}, {&(0x7f00000029c0)=""/25}, {&(0x7f0000002a00)=""/59}, {&(0x7f0000002a40)=""/19}], 0x0, &(0x7f0000002ac0)=""/134}}], 0x80000000, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, 0x0) pread64(r7, &(0x7f0000000180)=""/252, 0xfc, 0x0) 39.997473717s ago: executing program 0 (id=275): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7ffffffc]}, 0x8) close(r1) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xfffffe08, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x846) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200440, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'ext4\x00'}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@nodevmap}, {@cache_mmap}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'root'}}, {@subj_role}, {@flag='rw'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@seclabel}]}}) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$setown(r0, 0x8, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "449bab59"}, @main=@item_4={0x3, 0x0, 0x0, "0d34b68a"}, @local=@item_4={0x3, 0x2, 0x0, "0f4b99cb"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) rmdir(&(0x7f0000000280)='./file2\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc1}}) preadv(r5, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 37.9048776s ago: executing program 3 (id=187): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x341, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00'}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) inotify_init1(0x0) write$9p(0xffffffffffffffff, &(0x7f0000000ac0)="6c87c6b0a25f2e2cf212dff2b74e32dc249586c9548ba9b2f594da38dfd985c4d7cd0737b28b55dbc947df934934a9bb", 0x30) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@deltaction={0xa8, 0x31, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x8011) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) 35.400341657s ago: executing program 3 (id=283): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcb, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x2]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xff2e) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000000)=0xb0) connect$unix(r2, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 35.231149085s ago: executing program 0 (id=284): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="eb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000480), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r3, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r3, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 33.028978211s ago: executing program 3 (id=287): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto(r0, &(0x7f0000000080)="c8c6b9e1e15601bf0cb2a7f4fc31c745c8a2442c5c6e26a27456287c76f0574902579c6d6519e5d2351d008025a14cbe2a1e1cb9159b070fccba74e20a44aa24e823eb964117005d419f67c74142a8d2c556b16ecb8f6048dc3d3c8694deeed658fee80be912dfdbfada8608f80166306fead5fe24bfa5", 0x77, 0x0, &(0x7f0000000340)=@can={0x1d, r4}, 0x80) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x60d0}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000440)="48b75173803c8efa05c2a9ef8b9fc3dc9c21902cc4e338ab029ea784f6947c68847cb924463fda02fa41912b8835c1d014c99d049002e203c2e5cab23b98792f2905de2c1a1fe6e740f8d5a97d4a979c21a341718c26cf00f04047d6de2a08c4347f", 0x62, 0x894, 0x0, 0x2}, &(0x7f0000000740)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x18001, 0x0) sendmsg$unix(r3, &(0x7f0000000c80)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="d06c22184fc03782fbaa34d300dfc30e8f89347359fda4e435044ff8b994f393913dd1667bdf08a74931035ed4b9411a899d794a0adb33263f4f0aa63c84f31c1b6144015f8dd4482a4758d31e8514d7934b1a057c0b8822a3d7fab225efc88b5f5e9a531bcab33304ad729b9228867a727434eb4cddd465d8871430a7be4e6833221009883883babcea9f84d25f96becb6df3b16cd3744fbd53a8", 0x9b}, {&(0x7f0000000580)="f049470ffbd947006e5eab9d183b9409e5922a99bf070fb31bb62614ba920047ea65905e9becb2d6048fb4c9b683a9e774bd4438d260f0ebf97237e870ab31af8bf77a3d59602d249f8a4153de9090780fdd0758b86a912559005a16d6fb96cf1d78776a6826f5a252c9bc6b9b95", 0x6e}, {&(0x7f0000000600)="6effebd8eae4074720ae759dc6c882aa1b8ddf7db5c2bb025e453ddc1e555aee07569b2265895044e50d56cd57adb90c1aba638fe32c1678d34449caac0b97faea3645505a2de40476295605cc8345f6ba7db6c09615fccfc1cf1e2519a7ef481fd5b41a2d0592937aede58fc89c52353921667166b291a676a904e482564932a491af980160d23bdb57294fb869a495b4be4c9294fd2bfd926b776844d70b3babbe291a3f846ce8914941df303bf24a84faf2db01b0e278716795df49f3492327a216", 0xc3}, {&(0x7f0000000900)="892e0378c0b3c86284e24e444d30d3c6205be448360d2f50e52223afce972fd475829eada18d9775a9b86b7a39d958ef28b56c7f0182d1ee8810e11596ff0f48fd23a021c90e6ff5c0454f644bb9dc0363546e7ba27801fefd772e2509bf130f596fbdffccb8bd098c26eb511588c3ffd49701e4afb606b78fd0970af35ac9487ffb725ef9defa39b632cb57595ea01a6567ff215e2a05ab47538543b12a1a93bae004c61f16deae9a83d95da61b960c0d3adcabf1446382dd6dbed79bb17b42e6b8e5c6b4aa200749664e05d5b0f88f351a6522b0fd6e3e7e7b29", 0xdb}, {&(0x7f0000000700)="0f9f864ea06a652a8e33a0979a0a597d350a37a0ec3ebcdc7259c26cbdf92edd27de844750f97bc5870741b15649b2207bb35e44eaed18448528f943adbb", 0x3e}, {&(0x7f0000000780)="3cc6dc21a15b3ce2053a41e90b0bdfdc8039938319d8", 0x16}, {0x0}], 0x7, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r2, r2, r2, r6, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x80}, 0x10) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) 31.815881508s ago: executing program 3 (id=290): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) socket(0x2, 0x0, 0x26c00000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000021c0)=""/4111, &(0x7f00000003c0)=0x100f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1ff, 0x2, 0x2000, 0x2000, &(0x7f0000feb000/0x2000)=nil}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000200), 0x0) read$snapshot(r3, 0x0, 0xffffffbf) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r3}, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000480)="0f3166ba2100b0c8ee660faa66baf80cb854438c8666bafc0c66edb8005800000f23d80f21f835000000200f23f8ea0b9000004b000f01cb65660f3880951abdb74b66baf80cb8f8097d8c48efefbafc0ced66b8df008ed0", 0x58}], 0x1, 0x70, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001140)) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000001100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f01df0f070f01d1f30f090fc778e40fc775540f0fcc9a0f32260f370f214e", 0x1f}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26.003775576s ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) kcmp(r4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x49, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) sendto$inet(r8, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10) keyctl$describe(0x6, r6, &(0x7f0000000080)=""/72, 0x48) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "e5231296f5880856cfb591151cebcb3c130e574e0912fc5261cbe89b56860676f63ffd2a5c60e7dc92673d761aa2da81a8b43ddd019e9180e9f00518d131dd3d", 0x19}, 0x48, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000190001000052724d9154ffe6000000000000000a800000ff"], 0x1c}}, 0x0) 24.774646549s ago: executing program 3 (id=297): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) r4 = syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0xa65c}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x2, "fdffffffffffffff"}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)=0x0) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setpgid(r8, r9) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x10000, 0x0, 0x1, 0xfffffffd, 0x9, "0062ba7d82000000000000000000f7fffeff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0x12}}) 18.223097428s ago: executing program 4 (id=305): r0 = syz_open_dev$video(0x0, 0x81, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xd, @sdr}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000900)={0x0, 0xffffffffffffff17, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000080)={r4, r7}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000180)={r6, r7, 0x1}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000100), 0x8, 0x8240) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000140)) syz_usb_control_io$hid(r1, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') ioctl$FICLONE(r9, 0x40049409, r3) 16.620917166s ago: executing program 1 (id=306): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x3}, {}]}, @func, @union={0x7, 0x5, 0x0, 0x5, 0x1, 0x100, [{0xf, 0x2, 0x7f}, {0x7, 0x3, 0x6}, {0x1, 0x3, 0x7}, {0xe, 0x1, 0x1}, {0x1, 0x5, 0xa0}]}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) socket$tipc(0x1e, 0x2, 0x0) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000480), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) 16.476730339s ago: executing program 2 (id=307): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x21) syz_clone(0x4201080, 0x0, 0x2c, 0x0, 0x0, 0x0) close(0x3) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000001c0), &(0x7f00000004c0)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) 14.350938236s ago: executing program 2 (id=309): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x71478755683c7a81) mount$bind(0x0, 0x0, 0x0, 0x3091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_setup(0x168c, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x16}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2000c1, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x98f90d, 0x6, '\x00', @ptr}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000ff01000300000008000200030000006c6d794e9e46230d9447f99e9eee1b40b5ec4f3b94070f2073a5d6b4b72f1a00c7b1bfeb98ccf1c86b89b4009295a34f1dbf09cb7d02a679940b62feb7385f5aba69f329180efda1b2320c00cc88d8"], 0x30}}, 0x0) 13.827869243s ago: executing program 1 (id=310): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc0}, {0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0xf}, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@remote}}, 0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$revoke(0x6, 0x0) bind$netlink(r1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='.\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0x0], 0x5c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x60, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) semop(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) syz_open_dev$tty1(0xc, 0x4, 0x1) 12.865949277s ago: executing program 4 (id=311): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000880)={0x6}) getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c2000000080045000020000000002a53d306bb002f9078ac1e0001e000000020010000000c9078d2ab154b"], 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYRES16=r4], 0x15) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x0) write$FUSE_BMAP(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0) 12.716464175s ago: executing program 1 (id=312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000080)=[{r5, 0x24c0}], 0x1, &(0x7f0000000100), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(r0, &(0x7f00000144c0)='uid_map\x00') 12.471363028s ago: executing program 2 (id=313): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7f}) 7.282769162s ago: executing program 2 (id=314): sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') write$P9_RWRITE(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 7.092564836s ago: executing program 1 (id=315): openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800}, 0x20) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nr_inodes']) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x18, r4, 0x15, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0xffffffb5) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x1) set_mempolicy(0x3, 0x0, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.593312558s ago: executing program 4 (id=316): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendfile(r5, r4, 0x0, 0x2) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) 5.2153296s ago: executing program 4 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4.189807449s ago: executing program 4 (id=318): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa3264e3951dd318363e02d36fa69ecaa3978b6c471c9dde0052632d1ebe277982fb0c900dd3f461257ad46a69b8f1e9bc36d8992426aa4adddc024bb74a39539f1cf801502cbd0d7acb8b2c5d9778a8253d2c8746d5b252a32f67c94cb8916a6310c1af0c0eb6f09a07d5020948a9c0f147c01d4a8b3af25686eadef9eaed2623cb012521ab86453e71bf351c130b6d33ffc388afdb5b2b7c16c1002a0640dd73e7a7e6a852dd2c75209d711a50363e46116ad2a14483c3729a81e4ef2fed2f18732f0038e079e561eea96eb665219070f42139c627dd5f185d23fdc316d38eb99826bcb63938d6cd1af3b5274f57009f87854ad98bef03025c32e7aa4a721d28e94ec5feff3a279c2e1c18002e39eaaefec3dfd1eae45a61e4283e8a7ef1eaf70d93a0333a9ff9ef048332f3fcc797076f8c02858548418e34a9967282de2eb4cc6438f0b6c9dcc204cdd732dd88624b39c16e8f80819cb72be6ab07492ed05ade4caf1ae3d723830523e32c02786c50ac1f47b994ed49fc4b9b318a4c86b4f7fb0d3c6a8763ef27cd52936cc55ef5ac50935a7f706464be90ea4b5f894ad92910de17889a6236a4bda8aac5e1daa70a8fcf248360cdd4e86f854f23e3e4792d91c85f1ed6cf7c36bbe9d879fc86b55e55e0566b6451aad55b1b2"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r7, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r7, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x9a, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@call_mgmt={0x5}, @mdlm_detail={0x27, 0x24, 0x13, 0x0, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.32106189s ago: executing program 2 (id=319): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_gettime(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c040, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, &(0x7f00000006c0)='u'}) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.319630534s ago: executing program 1 (id=327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpriority(0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x36, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x100010, r4, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xff, 0xdb7, 0x3}, &(0x7f00000003c0)=0x10) r5 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000d00000000010400000000000000"], &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e40)=ANY=[@ANYBLOB="300000002e0003050000000000000000", @ANYBLOB="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", @ANYBLOB="4c000f000000000000920000"], 0x30}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40) recvfrom$inet_nvme(r5, &(0x7f0000000100)=""/41, 0x29, 0x23, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x9a6, 0x2, 0xff, 0xffffffff}, {0x6, 0x9, 0xe, 0xd}, {0x4, 0xf, 0x4, 0x5db0}, {0xaa, 0x8, 0xb, 0x568}]}) 2.463449235s ago: executing program 2 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r6, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r4, 0x4000, r4}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) rename(0x0, &(0x7f0000000040)='./file0\x00') ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)) socket$inet(0x2, 0x3, 0x1) utimes(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xa37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x98, 0x0, 0x0, 0x0, 0xd, 0x2, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x8, 0x0, 0x2, 0xfffffffffffffff7}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c07, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)={0x14, 0x39, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x4, 0x55}]}, 0x14}, {0x0}, {0x0}, {&(0x7f0000000f80)={0x10, 0x3a, 0x20, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000000500)={0x10, 0x2b, 0xa00, 0x70bd25, 0x25dfdbfc}, 0x10}], 0x5, &(0x7f0000004080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r6, r3, r1, 0xffffffffffffffff, r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r5, 0xffffffffffffffff]}}], 0xa8, 0x20000000}, 0x40085) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902e8"], 0x0) 604.942346ms ago: executing program 1 (id=321): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) epoll_create1(0x0) timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) write$P9_RSETATTR(r2, 0x0, 0xfffffffffffffce1) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x4000101b, 0xffffffffffffffff, 0x0) accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@gettaction={0x28, 0x32, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000400}, 0x4000) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) 0s ago: executing program 4 (id=322): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000003880)=@multiplanar_fd={0xe, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "708d18ad"}, 0x0, 0x4, {0x0}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000c01000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000557000/0x2000)=nil, &(0x7f0000509000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a8b000/0x1000)=nil, &(0x7f00009fe000/0x3000)=nil, 0x0}, 0x68) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008080000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001000000000000000000000044a349524fa600b79ace66818d06b83bea9313846bad"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) kernel console output (not intermixed with test programs): 198.480425][ T5241] Bluetooth: hci4: command tx timeout [ 198.806199][ T29] audit: type=1400 audit(1727410679.863:349): avc: denied { read } for pid=6072 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.925460][ T29] audit: type=1400 audit(1727410679.943:350): avc: denied { ioctl } for pid=6067 comm="syz.1.124" path="socket:[11166]" dev="sockfs" ino=11166 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 199.557278][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.575003][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.012032][ T6088] hfsplus: unable to find HFS+ superblock [ 200.024305][ T29] audit: type=1400 audit(1727410681.053:351): avc: denied { create } for pid=6085 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.520399][ T5241] Bluetooth: hci4: command tx timeout [ 200.680456][ T29] audit: type=1400 audit(1727410681.073:352): avc: denied { bind } for pid=6085 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.103528][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.115426][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.126789][ T6035] bridge_slave_0: entered allmulticast mode [ 201.147473][ T6035] bridge_slave_0: entered promiscuous mode [ 201.955137][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.400232][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.543918][ T6035] bridge_slave_1: entered allmulticast mode [ 202.622894][ T5241] Bluetooth: hci4: command tx timeout [ 202.850601][ T6035] bridge_slave_1: entered promiscuous mode [ 202.998962][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.050882][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.369645][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.382365][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.419085][ T29] audit: type=1400 audit(1727410685.483:353): avc: denied { ioctl } for pid=6125 comm="syz.1.132" path="socket:[11344]" dev="sockfs" ino=11344 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.511281][ T6035] team0: Port device team_slave_0 added [ 204.526383][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 204.579841][ T6035] team0: Port device team_slave_1 added [ 204.601188][ T5319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.674301][ T5241] Bluetooth: hci4: command tx timeout [ 204.827650][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.834643][ T5319] usb 1-1: Using ep0 maxpacket: 8 [ 204.877987][ T5319] usb 1-1: config 1 has an invalid interface number: 6 but max is 0 [ 204.923803][ T5319] usb 1-1: config 1 has no interface number 0 [ 204.979836][ T5319] usb 1-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 205.029869][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.039343][ T5319] usb 1-1: Product: syz [ 205.045231][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.052775][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.090511][ T5319] usb 1-1: Manufacturer: syz [ 205.095180][ T5319] usb 1-1: SerialNumber: syz [ 205.108599][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.202321][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 205.228748][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.532796][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.540740][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.827137][ T6142] netlink: 68 bytes leftover after parsing attributes in process `syz.4.135'. [ 205.883562][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.519912][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 206.750624][ T5231] Bluetooth: hci3: command 0x0405 tx timeout [ 206.873870][ T58] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 206.882205][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 206.896240][ T58] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.913021][ T29] audit: type=1400 audit(1727410687.973:354): avc: denied { write } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.935814][ T58] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.944449][ T58] usb 3-1: Product: syz [ 206.948775][ T58] usb 3-1: Manufacturer: syz [ 206.954421][ T58] usb 3-1: SerialNumber: syz [ 206.968527][ T6035] hsr_slave_0: entered promiscuous mode [ 206.969092][ T58] usb 3-1: config 0 descriptor?? [ 206.985628][ T58] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 207.004496][ T29] audit: type=1400 audit(1727410687.973:355): avc: denied { remove_name } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.053508][ T58] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.054350][ T6035] hsr_slave_1: entered promiscuous mode [ 207.063705][ T29] audit: type=1400 audit(1727410687.973:356): avc: denied { rename } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.206503][ T29] audit: type=1400 audit(1727410687.973:357): avc: denied { add_name } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.892501][ T29] audit: type=1400 audit(1727410687.973:358): avc: denied { unlink } for pid=4658 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.915207][ T29] audit: type=1400 audit(1727410687.973:359): avc: denied { create } for pid=4658 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 207.941638][ T29] audit: type=1400 audit(1727410688.053:360): avc: denied { create } for pid=6145 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.962723][ T29] audit: type=1400 audit(1727410688.063:361): avc: denied { setopt } for pid=6145 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.185023][ T6152] nullb0: AHDI p1 [ 208.199921][ T29] audit: type=1400 audit(1727410688.073:362): avc: denied { write } for pid=6145 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.744650][ T52] bridge_slave_1: left allmulticast mode [ 208.750839][ T52] bridge_slave_1: left promiscuous mode [ 208.757891][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.898067][ T6165] Zero length message leads to an empty skb [ 209.005571][ T52] bridge_slave_0: left allmulticast mode [ 209.139344][ T52] bridge_slave_0: left promiscuous mode [ 209.200820][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.220884][ T9] usb 3-1: USB disconnect, device number 2 [ 209.254140][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 209.754793][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 209.754847][ T29] audit: type=1400 audit(1727410690.723:366): avc: denied { create } for pid=6168 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 210.285986][ T5319] usb 1-1: palm_os_4_probe - error -32 getting connection info [ 210.299023][ T5319] visor 1-1:1.6: Handspring Visor / Palm OS converter detected [ 210.661503][ T29] audit: type=1400 audit(1727410690.733:367): avc: denied { sys_admin } for pid=6168 comm="syz.1.139" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 210.732142][ T5319] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 210.786440][ T29] audit: type=1400 audit(1727410690.773:368): avc: denied { execute } for pid=6168 comm="syz.1.139" path=2F6D656D66643A25202864656C6574656429 dev="hugetlbfs" ino=11390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 210.842122][ T5319] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 211.334967][ T6184] netlink: 256 bytes leftover after parsing attributes in process `syz.1.140'. [ 212.091164][ T58] usb 1-1: USB disconnect, device number 3 [ 212.125903][ T58] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 212.154907][ T58] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 212.164993][ T58] visor 1-1:1.6: device disconnected [ 212.230191][ T29] audit: type=1400 audit(1727410692.413:369): avc: denied { write } for pid=6178 comm="syz.1.140" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 214.223372][ T29] audit: type=1400 audit(1727410695.293:370): avc: denied { create } for pid=6190 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.554572][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.564645][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.600741][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.634319][ T29] audit: type=1400 audit(1727410695.653:371): avc: denied { setopt } for pid=6206 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.653822][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.664351][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.816612][ T29] audit: type=1400 audit(1727410695.793:372): avc: denied { write } for pid=6206 comm="syz.1.144" path="socket:[11460]" dev="sockfs" ino=11460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.092025][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.101420][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.335402][ T29] audit: type=1400 audit(1727410696.403:373): avc: denied { setopt } for pid=6213 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.477717][ T29] audit: type=1400 audit(1727410696.543:374): avc: denied { execute } for pid=6213 comm="syz.4.145" name="file2" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.500828][ T29] audit: type=1400 audit(1727410696.543:375): avc: denied { execute_no_trans } for pid=6213 comm="syz.4.145" path="/15/file2" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.524706][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.672187][ T29] audit: type=1400 audit(1727410697.003:376): avc: denied { write } for pid=6216 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.878663][ T29] audit: type=1400 audit(1727410697.003:377): avc: denied { nlmsg_write } for pid=6216 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.947531][ T29] audit: type=1400 audit(1727410698.013:378): avc: denied { listen } for pid=6213 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.986757][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.014452][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.029745][ T52] bond0 (unregistering): Released all slaves [ 217.163893][ T5231] Bluetooth: hci2: command tx timeout [ 217.648706][ T6237] program syz.1.147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.473913][ T52] hsr_slave_0: left promiscuous mode [ 218.505735][ T52] hsr_slave_1: left promiscuous mode [ 218.695707][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.730597][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.770152][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.797063][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.856377][ T52] veth1_macvtap: left promiscuous mode [ 218.880382][ T52] veth0_macvtap: left promiscuous mode [ 218.900793][ T52] veth1_vlan: left promiscuous mode [ 218.906167][ T52] veth0_vlan: left promiscuous mode [ 219.240528][ T5231] Bluetooth: hci2: command tx timeout [ 219.369146][ T6260] evm: overlay not supported [ 219.387620][ T29] audit: type=1400 audit(1727410700.373:379): avc: denied { watch watch_reads } for pid=6256 comm="syz.1.149" path="/54/file1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.193115][ T6255] syz.4.148: attempt to access beyond end of device [ 220.193115][ T6255] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 220.208563][ T6255] SQUASHFS error: Failed to read block 0x0: -5 [ 220.214952][ T29] audit: type=1400 audit(1727410701.253:380): avc: denied { create } for pid=6252 comm="syz.4.148" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.240378][ T6255] unable to read squashfs_super_block [ 220.280865][ T29] audit: type=1400 audit(1727410701.253:381): avc: denied { mounton } for pid=6252 comm="syz.4.148" path="/16/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.481262][ T6263] Process accounting resumed [ 221.322348][ T5231] Bluetooth: hci2: command tx timeout [ 222.440455][ T29] audit: type=1400 audit(1727410702.763:382): avc: denied { override_creds } for pid=6266 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 222.571671][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.646446][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.655232][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.663597][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.682261][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.691043][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.155328][ T52] team0 (unregistering): Port device team_slave_1 removed [ 223.393228][ T5241] Bluetooth: hci2: command tx timeout [ 223.600761][ T52] team0 (unregistering): Port device team_slave_0 removed [ 224.047612][ T29] audit: type=1400 audit(1727410705.113:383): avc: denied { ioctl } for pid=6282 comm="syz.1.155" path="socket:[12604]" dev="sockfs" ino=12604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.057677][ T6284] vxcan1: tx address claim with different name [ 224.750507][ T5241] Bluetooth: hci3: command tx timeout [ 225.239935][ T6204] chnl_net:caif_netlink_parms(): no params data found [ 227.770593][ T5241] Bluetooth: hci3: command tx timeout [ 229.791960][ T5241] Bluetooth: hci3: command tx timeout [ 230.654641][ T6035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.669454][ T6035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.764754][ T6317] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 230.772703][ T6317] netlink: 224 bytes leftover after parsing attributes in process `syz.1.160'. [ 231.551143][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.558317][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.590555][ T6204] bridge_slave_0: entered allmulticast mode [ 231.607704][ T6204] bridge_slave_0: entered promiscuous mode [ 231.640696][ T6035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.664633][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.680043][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.687811][ T6204] bridge_slave_1: entered allmulticast mode [ 231.695576][ T6204] bridge_slave_1: entered promiscuous mode [ 231.707095][ T6035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.725642][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 231.765708][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.798424][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.870538][ T5241] Bluetooth: hci3: command tx timeout [ 231.900759][ T6204] team0: Port device team_slave_0 added [ 231.929811][ T6204] team0: Port device team_slave_1 added [ 231.969636][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.978259][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.985855][ T6271] bridge_slave_0: entered allmulticast mode [ 231.993393][ T6271] bridge_slave_0: entered promiscuous mode [ 232.048623][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.073078][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.080230][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.094574][ T6271] bridge_slave_1: entered allmulticast mode [ 232.102200][ T6271] bridge_slave_1: entered promiscuous mode [ 232.131775][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.138760][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.165570][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.178543][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.186018][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.214442][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.254485][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.283588][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.344314][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.374959][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.392260][ T6204] hsr_slave_0: entered promiscuous mode [ 232.398920][ T6204] hsr_slave_1: entered promiscuous mode [ 232.406638][ T6204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.417365][ T6204] Cannot create hsr debugfs directory [ 232.560630][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.422078][ T6271] team0: Port device team_slave_0 added [ 235.460130][ T6271] team0: Port device team_slave_1 added [ 235.542065][ T6336] No control pipe specified [ 235.567472][ T29] audit: type=1400 audit(1727410716.623:384): avc: denied { connect } for pid=6331 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.060130][ T29] audit: type=1400 audit(1727410718.123:385): avc: denied { ioctl } for pid=6342 comm="syz.4.164" path="socket:[12830]" dev="sockfs" ino=12830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.123126][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.139089][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.419821][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.959132][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.997878][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.070706][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.212956][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.571345][ T6271] hsr_slave_0: entered promiscuous mode [ 238.578203][ T6271] hsr_slave_1: entered promiscuous mode [ 239.119876][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.127867][ T6271] Cannot create hsr debugfs directory [ 239.455159][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.147701][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.522744][ T6035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.535054][ T6035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.940540][ T29] audit: type=1400 audit(1727410722.663:386): avc: denied { setopt } for pid=6369 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.404973][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.412346][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.433753][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.441581][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.570846][ T6376] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 242.580906][ T6376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.169'. [ 243.312151][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 243.669816][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.833995][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.656725][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.922693][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.972407][ T52] bridge_slave_1: left allmulticast mode [ 244.978291][ T52] bridge_slave_1: left promiscuous mode [ 245.001255][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.022091][ T52] bridge_slave_0: left allmulticast mode [ 245.028074][ T52] bridge_slave_0: left promiscuous mode [ 245.040155][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.059393][ T52] bridge_slave_1: left allmulticast mode [ 245.066389][ T52] bridge_slave_1: left promiscuous mode [ 245.080575][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.099542][ T52] bridge_slave_0: left allmulticast mode [ 245.105794][ T52] bridge_slave_0: left promiscuous mode [ 245.118895][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.826041][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.838762][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.850421][ T52] bond0 (unregistering): Released all slaves [ 245.955002][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.972740][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.983695][ T52] bond0 (unregistering): Released all slaves [ 246.292856][ T6035] veth0_vlan: entered promiscuous mode [ 246.312875][ T6035] veth1_vlan: entered promiscuous mode [ 246.388547][ T6035] veth0_macvtap: entered promiscuous mode [ 246.417402][ T6035] veth1_macvtap: entered promiscuous mode [ 246.483325][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.495750][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.508591][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.519519][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.540359][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.560328][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.570194][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.588916][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.612860][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.656139][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.700299][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.710170][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.729704][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.740005][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.760629][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.781152][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.801124][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.821119][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.841566][ T6035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.859666][ T6035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.869001][ T6035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.891564][ T6035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.060490][ T52] hsr_slave_0: left promiscuous mode [ 247.069184][ T52] hsr_slave_1: left promiscuous mode [ 247.076164][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.083788][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.094394][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.102278][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.114696][ T52] hsr_slave_0: left promiscuous mode [ 247.121077][ T52] hsr_slave_1: left promiscuous mode [ 247.130593][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.138037][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.146833][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.154861][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.188909][ T52] veth1_macvtap: left promiscuous mode [ 247.194599][ T52] veth0_macvtap: left promiscuous mode [ 247.200220][ T52] veth1_vlan: left promiscuous mode [ 247.205666][ T52] veth0_vlan: left promiscuous mode [ 247.213602][ T52] veth1_macvtap: left promiscuous mode [ 247.219196][ T52] veth0_macvtap: left promiscuous mode [ 247.225128][ T52] veth1_vlan: left promiscuous mode [ 247.230537][ T52] veth0_vlan: left promiscuous mode [ 247.749916][ T52] team0 (unregistering): Port device team_slave_1 removed [ 247.800112][ T52] team0 (unregistering): Port device team_slave_0 removed [ 248.469047][ T52] team0 (unregistering): Port device team_slave_1 removed [ 248.516314][ T52] team0 (unregistering): Port device team_slave_0 removed [ 248.934775][ T6204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.033301][ T6204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.045647][ T6204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.117336][ T6204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.173771][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.207604][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.327341][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.336691][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.607477][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.810686][ T5308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.275388][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.283030][ T6422] dccp_v6_rcv: dropped packet with invalid checksum [ 250.340685][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 250.348768][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.355948][ T5555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.367344][ T5308] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 250.384697][ T5308] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.405180][ T52] IPVS: stop unused estimator thread 0... [ 250.446460][ T5308] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 250.524310][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.548842][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.556082][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.582895][ T5308] usb 5-1: config 0 descriptor?? [ 250.699193][ T6271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.740047][ T6271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.030576][ T6271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.378998][ T6271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.022410][ T29] audit: type=1400 audit(1727410734.093:387): avc: denied { connect } for pid=6441 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.140621][ T5308] usb 5-1: string descriptor 0 read error: -71 [ 254.149377][ T5308] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 254.240697][ T5308] usb 5-1: USB disconnect, device number 2 [ 254.356443][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.709254][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.268585][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.275990][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.062349][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.069525][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.585711][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.744764][ T6204] veth0_vlan: entered promiscuous mode [ 258.761624][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 258.791496][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 258.811712][ T6204] veth1_vlan: entered promiscuous mode [ 258.907857][ T6204] veth0_macvtap: entered promiscuous mode [ 258.925441][ T29] audit: type=1400 audit(1727410739.993:388): avc: denied { append } for pid=6466 comm="syz.4.176" name="virtual_nci" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.956055][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.972114][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.973175][ T6204] veth1_macvtap: entered promiscuous mode [ 259.002369][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 259.015709][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.098100][ T9] usb 2-1: config 0 descriptor?? [ 259.141767][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.172808][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.196137][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.220365][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.250166][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.272344][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.292127][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.337735][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.384508][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.422487][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.436883][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.469453][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.500324][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.530297][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.581773][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.595535][ T9] logitech 0003:046D:C101.0001: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.1-1/input0 [ 259.634720][ T6204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.660102][ T6204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.679604][ T6204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.707276][ T6204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.752105][ T6472] trusted_key: encrypted_key: master key parameter is missing [ 259.802817][ T5279] usb 2-1: USB disconnect, device number 4 [ 259.844429][ T6271] veth0_vlan: entered promiscuous mode [ 259.878666][ T6271] veth1_vlan: entered promiscuous mode [ 259.928656][ T29] audit: type=1400 audit(1727410740.993:389): avc: denied { write } for pid=6496 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.041854][ T6500] netlink: 'syz.4.181': attribute type 4 has an invalid length. [ 260.095090][ T6271] veth0_macvtap: entered promiscuous mode [ 260.115259][ T6271] veth1_macvtap: entered promiscuous mode [ 260.187804][ T5555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.196964][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.211972][ T5555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.230165][ T29] audit: type=1400 audit(1727410741.293:390): avc: denied { map } for pid=6468 comm="syz.3.177" path="socket:[14368]" dev="sockfs" ino=14368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.273519][ T29] audit: type=1400 audit(1727410741.303:391): avc: denied { read } for pid=6468 comm="syz.3.177" path="socket:[14368]" dev="sockfs" ino=14368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.274638][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.332861][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.348808][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.378122][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.446758][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.468106][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.489979][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.512442][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.638912][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.678671][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.754457][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.778481][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.796635][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.959990][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.970108][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.982446][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.994850][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.994946][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.982766][ T29] audit: type=1400 audit(1727410742.953:392): avc: denied { ioctl } for pid=6506 comm="syz.1.182" path="socket:[13952]" dev="sockfs" ino=13952 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 262.063741][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.155207][ T6271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.185290][ T6506] delete_channel: no stack [ 262.258709][ T6271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.267829][ T6271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.277472][ T6271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.352456][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.387227][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.063244][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.104762][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.283966][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.298540][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.090975][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.360895][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.374014][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.505104][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.530470][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.538562][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.560489][ T29] audit: type=1400 audit(1727410754.553:393): avc: denied { bind } for pid=6539 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.561267][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.600162][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.620399][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.630914][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.669399][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.680728][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.009626][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.262927][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.752017][ T5231] Bluetooth: hci1: command tx timeout [ 276.765863][ T5231] Bluetooth: hci6: command tx timeout [ 277.642578][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.783652][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.145667][ T6573] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 278.153592][ T6573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.195'. [ 278.860446][ T5231] Bluetooth: hci1: command tx timeout [ 278.866761][ T5235] Bluetooth: hci6: command tx timeout [ 279.173993][ T52] bridge_slave_1: left allmulticast mode [ 279.185473][ T52] bridge_slave_1: left promiscuous mode [ 279.191364][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.201985][ T52] bridge_slave_0: left allmulticast mode [ 279.207754][ T52] bridge_slave_0: left promiscuous mode [ 279.238013][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.939326][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.959291][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.022984][ T52] bond0 (unregistering): Released all slaves [ 280.889142][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 280.927486][ T5235] Bluetooth: hci6: command tx timeout [ 280.927512][ T5231] Bluetooth: hci1: command tx timeout [ 280.959755][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 281.139308][ T52] hsr_slave_0: left promiscuous mode [ 281.180618][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.225890][ T52] hsr_slave_1: left promiscuous mode [ 281.247339][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.269648][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.401355][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.503225][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.605122][ T52] veth1_macvtap: left promiscuous mode [ 281.646973][ T52] veth0_macvtap: left promiscuous mode [ 281.671009][ T52] veth1_vlan: left promiscuous mode [ 281.676330][ T52] veth0_vlan: left promiscuous mode [ 282.229131][ T6604] input: syz0 as /devices/virtual/input/input6 [ 282.416998][ T29] audit: type=1400 audit(1727410763.463:394): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2360 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.818734][ T29] audit: type=1400 audit(1727410763.473:395): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2360 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.990383][ T5231] Bluetooth: hci6: command tx timeout [ 282.995864][ T5231] Bluetooth: hci1: command tx timeout [ 285.848754][ T52] team0 (unregistering): Port device team_slave_1 removed [ 286.009202][ T52] team0 (unregistering): Port device team_slave_0 removed [ 286.092097][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.869662][ T29] audit: type=1400 audit(1727410768.933:396): avc: denied { setattr } for pid=6637 comm="syz.1.205" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 288.928212][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 290.147598][ T29] audit: type=1326 audit(1727410771.213:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.191336][ T29] audit: type=1326 audit(1727410771.213:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.223865][ T29] audit: type=1326 audit(1727410771.213:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.249330][ T29] audit: type=1326 audit(1727410771.213:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.272891][ T29] audit: type=1326 audit(1727410771.213:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.296522][ T29] audit: type=1326 audit(1727410771.243:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.319986][ T29] audit: type=1326 audit(1727410771.243:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.343470][ T29] audit: type=1326 audit(1727410771.243:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.366899][ T29] audit: type=1326 audit(1727410771.243:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f844797df39 code=0x7ffc0000 [ 290.433978][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.526601][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.557874][ T6536] bridge_slave_0: entered allmulticast mode [ 290.595711][ T6536] bridge_slave_0: entered promiscuous mode [ 290.626033][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.634627][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.662605][ T6542] bridge_slave_0: entered allmulticast mode [ 290.690074][ T6542] bridge_slave_0: entered promiscuous mode [ 290.723171][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.774763][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.786368][ T6542] bridge_slave_1: entered allmulticast mode [ 290.802038][ T6542] bridge_slave_1: entered promiscuous mode [ 290.833975][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.868419][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.936242][ T6536] bridge_slave_1: entered allmulticast mode [ 290.975724][ T6536] bridge_slave_1: entered promiscuous mode [ 291.169355][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.416491][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.429331][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.553569][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.921131][ T6536] team0: Port device team_slave_0 added [ 292.929791][ T6542] team0: Port device team_slave_0 added [ 292.959185][ T6536] team0: Port device team_slave_1 added [ 293.090305][ T6682] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 294.330650][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.339039][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.446324][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.472085][ T6542] team0: Port device team_slave_1 added [ 294.660092][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.064905][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 295.064927][ T29] audit: type=1400 audit(1727410776.093:418): avc: denied { create } for pid=6690 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.222875][ T29] audit: type=1400 audit(1727410776.103:419): avc: denied { bind } for pid=6690 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.440824][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.880126][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.906813][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.125251][ T6702] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 296.713101][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.850290][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.038963][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.072336][ T29] audit: type=1400 audit(1727410778.143:420): avc: denied { append } for pid=6705 comm="syz.1.214" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 297.516909][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.547262][ T6707] input: syz1 as /devices/virtual/input/input8 [ 297.555420][ T29] audit: type=1400 audit(1727410778.633:421): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2361 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.528392][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.568089][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.582871][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.652736][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.718573][ T29] audit: type=1400 audit(1727410779.773:422): avc: denied { sys_chroot } for pid=6720 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 298.741710][ T29] audit: type=1400 audit(1727410779.773:423): avc: denied { setgid } for pid=6720 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 298.769974][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.801475][ T6711] netlink: 'syz.1.214': attribute type 8 has an invalid length. [ 298.810366][ T29] audit: type=1400 audit(1727410779.773:424): avc: denied { setrlimit } for pid=6720 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 298.843780][ T6536] hsr_slave_0: entered promiscuous mode [ 298.869567][ T6536] hsr_slave_1: entered promiscuous mode [ 298.888483][ T6536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.901171][ T6536] Cannot create hsr debugfs directory [ 298.978561][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.468881][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'. [ 300.487916][ T6731] binder: 6727:6731 ioctl c0306201 0 returned -14 [ 302.781015][ T29] audit: type=1400 audit(1727410782.613:425): avc: denied { mount } for pid=6732 comm="syz.2.220" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 302.844351][ T6542] hsr_slave_0: entered promiscuous mode [ 302.940518][ T6542] hsr_slave_1: entered promiscuous mode [ 302.960023][ T6542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.995665][ T6542] Cannot create hsr debugfs directory [ 303.011989][ T29] audit: type=1400 audit(1727410784.083:426): avc: denied { read write } for pid=6725 comm="syz.1.218" name="uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.075439][ T6729] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 303.097121][ T6741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.112341][ T29] audit: type=1400 audit(1727410784.113:427): avc: denied { open } for pid=6725 comm="syz.1.218" path="/dev/uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.119936][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 303.154045][ T5231] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 303.312217][ T6744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.072492][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.080057][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.087691][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.095251][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.103294][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.111178][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.118646][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.126152][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.133718][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.141215][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.148649][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.156190][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.163723][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.171249][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.178682][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.190359][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.200355][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.213883][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.225312][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.238220][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.246336][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.253854][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.261351][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.268784][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.276291][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.283840][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.291668][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.299105][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.306995][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.314917][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.322465][ T5279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 304.373795][ T5279] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 304.777304][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 305.332576][ T5231] Bluetooth: hci3: command tx timeout [ 306.213388][ T6756] UBIFS error (pid: 6756): cannot open "./file0", error -22 [ 307.127302][ T6758] Invalid ELF header magic: != ELF [ 307.214737][ T35] bridge_slave_1: left allmulticast mode [ 307.222919][ T35] bridge_slave_1: left promiscuous mode [ 307.230482][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.940296][ T29] audit: type=1400 audit(1727410788.433:428): avc: denied { mount } for pid=6760 comm="syz.2.227" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 308.477616][ T29] audit: type=1400 audit(1727410789.453:429): avc: denied { write } for pid=6747 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 308.544488][ T35] bridge_slave_0: left allmulticast mode [ 308.556414][ T35] bridge_slave_0: left promiscuous mode [ 308.569297][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.683255][ T29] audit: type=1400 audit(1727410789.753:430): avc: denied { unmount } for pid=6271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.800385][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.813352][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.827244][ T35] bond0 (unregistering): Released all slaves [ 309.920380][ T9] usb 2-1: device descriptor read/64, error -110 [ 310.483689][ T5279] IPVS: starting estimator thread 0... [ 310.510873][ T6784] x_tables: duplicate underflow at hook 1 [ 310.580449][ T6785] IPVS: using max 15 ests per chain, 36000 per kthread [ 310.661006][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.675581][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.684124][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.704741][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.720456][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.728351][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.036180][ T35] hsr_slave_0: left promiscuous mode [ 311.053915][ T35] hsr_slave_1: left promiscuous mode [ 311.064678][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.072815][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.081613][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.089054][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.131064][ T35] veth1_macvtap: left promiscuous mode [ 311.136595][ T35] veth0_macvtap: left promiscuous mode [ 311.148998][ T35] veth1_vlan: left promiscuous mode [ 311.154552][ T35] veth0_vlan: left promiscuous mode [ 311.423228][ T6790] 9pnet_fd: Insufficient options for proto=fd [ 312.047380][ T35] team0 (unregistering): Port device team_slave_1 removed [ 312.187512][ T35] team0 (unregistering): Port device team_slave_0 removed [ 312.750356][ T5231] Bluetooth: hci0: command tx timeout [ 312.946723][ T6536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.053973][ T6536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.093963][ T6536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.123027][ T6536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.365778][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 313.668314][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.939227][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.047613][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.124599][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.142351][ T6786] bridge_slave_0: entered allmulticast mode [ 314.149738][ T6786] bridge_slave_0: entered promiscuous mode [ 314.158999][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.191676][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.249880][ T6786] bridge_slave_1: entered allmulticast mode [ 314.270064][ T6786] bridge_slave_1: entered promiscuous mode [ 314.422598][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.498089][ T6815] loop7: detected capacity change from 0 to 16384 [ 314.551005][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.566189][ T6815] loop7: detected capacity change from 16384 to 16383 [ 314.587708][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.628236][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.630310][ T29] audit: type=1326 audit(1727410795.683:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.0.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f7df39 code=0x0 [ 314.786384][ T6786] team0: Port device team_slave_0 added [ 314.819254][ T6786] team0: Port device team_slave_1 added [ 314.830657][ T5231] Bluetooth: hci0: command tx timeout [ 314.860037][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.975443][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.985705][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.012437][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.087073][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.098382][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.130299][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.180971][ T6542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.248098][ T6542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.268374][ T6542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.285268][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.295843][ T35] bridge_slave_1: left allmulticast mode [ 315.314283][ T35] bridge_slave_1: left promiscuous mode [ 315.321217][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.338033][ T35] bridge_slave_0: left allmulticast mode [ 315.346960][ T35] bridge_slave_0: left promiscuous mode [ 315.353640][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.667312][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.700433][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.712296][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.733369][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.756049][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.771520][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.790561][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.814435][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.825976][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.833522][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.860387][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.875405][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.883966][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.893300][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.902992][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.912209][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.920103][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.928520][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.931226][ T5274] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.938311][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.963595][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.977783][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 315.988075][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.003009][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.016451][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.026241][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.047645][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.059927][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.069203][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.078321][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.081823][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.094688][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.102768][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.110798][ T5319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 316.119061][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.130944][ T5319] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 316.132352][ T35] bond0 (unregistering): Released all slaves [ 316.154876][ T5274] usb 1-1: no configurations [ 316.159902][ T5274] usb 1-1: can't read configurations, error -22 [ 316.245333][ T6542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.299103][ T6786] hsr_slave_0: entered promiscuous mode [ 316.307198][ T6786] hsr_slave_1: entered promiscuous mode [ 316.320449][ T5274] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 316.332163][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.339273][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.494903][ T5274] usb 1-1: no configurations [ 316.515659][ T5274] usb 1-1: can't read configurations, error -22 [ 316.532108][ T5274] usb usb1-port1: attempt power cycle [ 316.643734][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.650952][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.861983][ T35] hsr_slave_0: left promiscuous mode [ 316.868612][ T35] hsr_slave_1: left promiscuous mode [ 316.889044][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.897624][ T5274] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 316.910392][ T5231] Bluetooth: hci0: command tx timeout [ 316.932448][ T5274] usb 1-1: no configurations [ 316.937137][ T5274] usb 1-1: can't read configurations, error -22 [ 316.953785][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.973261][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.990868][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.029743][ T35] veth1_macvtap: left promiscuous mode [ 317.049118][ T35] veth0_macvtap: left promiscuous mode [ 317.066846][ T35] veth1_vlan: left promiscuous mode [ 317.080598][ T5274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 317.084233][ T35] veth0_vlan: left promiscuous mode [ 317.126639][ T5274] usb 1-1: no configurations [ 317.140390][ T5274] usb 1-1: can't read configurations, error -22 [ 317.148301][ T5274] usb usb1-port1: unable to enumerate USB device [ 317.915921][ T35] team0 (unregistering): Port device team_slave_1 removed [ 317.957186][ T35] team0 (unregistering): Port device team_slave_0 removed [ 318.739486][ T29] audit: type=1400 audit(1727410799.803:432): avc: denied { connect } for pid=6856 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.759009][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.869159][ T29] audit: type=1400 audit(1727410799.933:433): avc: denied { read } for pid=6856 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.994389][ T5231] Bluetooth: hci0: command tx timeout [ 319.232025][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.602909][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.653004][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.742324][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.749572][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.822632][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.829865][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.042597][ T6786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.099212][ T6786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.148751][ T6786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.222928][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.238649][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.250452][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.260855][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.271663][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.287225][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.338693][ T6786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.636564][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.839154][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.019673][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.167223][ T6536] veth0_vlan: entered promiscuous mode [ 321.244141][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.363780][ T6905] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.853441][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.928379][ T6536] veth1_vlan: entered promiscuous mode [ 321.962521][ T6536] veth0_macvtap: entered promiscuous mode [ 321.972788][ T6536] veth1_macvtap: entered promiscuous mode [ 321.991615][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.002477][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.012731][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.023638][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.037867][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.104430][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.071190][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.111657][ T29] audit: type=1400 audit(1727410803.243:434): avc: denied { ioctl } for pid=6909 comm="syz.0.238" path="socket:[17088]" dev="sockfs" ino=17088 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 323.136392][ T5231] Bluetooth: hci3: command tx timeout [ 323.136438][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.151426][ T5235] Bluetooth: hci3: command tx timeout [ 326.958718][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.987017][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.029257][ T6536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.079870][ T6536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.118529][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.235369][ T5235] Bluetooth: hci3: command tx timeout [ 327.287474][ T6542] veth0_vlan: entered promiscuous mode [ 327.308388][ T6536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.336435][ T6536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.358071][ T6536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.378048][ T6536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.548167][ T52] bridge_slave_1: left allmulticast mode [ 327.571749][ T52] bridge_slave_1: left promiscuous mode [ 327.577582][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.605379][ T52] bridge_slave_0: left allmulticast mode [ 327.615381][ T52] bridge_slave_0: left promiscuous mode [ 327.624689][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.709210][ T29] audit: type=1326 audit(1727410808.773:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.0.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f7df39 code=0x0 [ 328.848932][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.872263][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.885114][ T52] bond0 (unregistering): Released all slaves [ 328.915494][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.953518][ T6542] veth1_vlan: entered promiscuous mode [ 329.139046][ T6880] chnl_net:caif_netlink_parms(): no params data found [ 329.160039][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.167259][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.560106][ T5235] Bluetooth: hci3: command tx timeout [ 330.025021][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.032284][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.052888][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.073162][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.318023][ T6542] veth0_macvtap: entered promiscuous mode [ 330.690003][ T6542] veth1_macvtap: entered promiscuous mode [ 331.251806][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.300416][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.330194][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.380643][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.408327][ T6880] bridge_slave_0: entered allmulticast mode [ 331.437228][ T6880] bridge_slave_0: entered promiscuous mode [ 331.525504][ T52] hsr_slave_0: left promiscuous mode [ 331.547412][ T52] hsr_slave_1: left promiscuous mode [ 331.561276][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.568746][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.552117][ T5231] Bluetooth: hci2: command tx timeout [ 332.612109][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.619619][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.779406][ T52] veth1_macvtap: left promiscuous mode [ 332.798399][ T52] veth0_macvtap: left promiscuous mode [ 332.811512][ T52] veth1_vlan: left promiscuous mode [ 332.816885][ T52] veth0_vlan: left promiscuous mode [ 333.107544][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.116596][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.126145][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.135102][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.144849][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.153889][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.799382][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.820490][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.831442][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.860451][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.900592][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.941221][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.292804][ T5231] Bluetooth: hci2: Dropping invalid advertising data [ 334.308443][ T6996] vivid-000: disconnect [ 334.328298][ T6995] vivid-000: reconnect [ 334.629537][ T52] team0 (unregistering): Port device team_slave_1 removed [ 334.703284][ T52] team0 (unregistering): Port device team_slave_0 removed [ 334.932118][ T29] audit: type=1400 audit(1727410815.993:436): avc: denied { bind } for pid=7010 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.240786][ T5231] Bluetooth: hci4: command tx timeout [ 335.328139][ T7013] tmpfs: Bad value for 'mpol' [ 335.355706][ T29] audit: type=1400 audit(1727410816.423:437): avc: denied { setopt } for pid=7010 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.033845][ T5231] Bluetooth: hci5: command tx timeout [ 336.209016][ T6786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.227848][ T6786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.294842][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.319017][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.338831][ T6880] bridge_slave_1: entered allmulticast mode [ 336.347322][ T6880] bridge_slave_1: entered promiscuous mode [ 336.650193][ T6880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.769274][ T7018] Bluetooth: MGMT ver 1.23 [ 337.265366][ T6880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.310875][ T5231] Bluetooth: hci4: command tx timeout [ 337.822869][ T6880] team0: Port device team_slave_0 added [ 337.851536][ T6880] team0: Port device team_slave_1 added [ 338.143844][ T5235] Bluetooth: hci5: command tx timeout [ 338.808107][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.830385][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.857291][ T6880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.860718][ T5235] Bluetooth: hci0: command tx timeout [ 338.907116][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.916185][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.025689][ T6880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.390602][ T5235] Bluetooth: hci4: command tx timeout [ 339.881198][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 339.895430][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.193837][ T5231] Bluetooth: hci5: command tx timeout [ 340.341910][ T29] audit: type=1400 audit(1727410821.283:438): avc: denied { bind } for pid=7043 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.486197][ T6880] hsr_slave_0: entered promiscuous mode [ 340.521688][ T6880] hsr_slave_1: entered promiscuous mode [ 340.548934][ T6880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.606721][ T6880] Cannot create hsr debugfs directory [ 340.983148][ T6989] chnl_net:caif_netlink_parms(): no params data found [ 341.480900][ T5231] Bluetooth: hci4: command tx timeout [ 341.552764][ T6979] chnl_net:caif_netlink_parms(): no params data found [ 341.730730][ T6786] veth0_vlan: entered promiscuous mode [ 341.745341][ T6786] veth1_vlan: entered promiscuous mode [ 342.256403][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.263745][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.272310][ T5231] Bluetooth: hci5: command tx timeout [ 342.303104][ T6989] bridge_slave_0: entered allmulticast mode [ 342.309992][ T6989] bridge_slave_0: entered promiscuous mode [ 342.424830][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.440038][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.457443][ T6989] bridge_slave_1: entered allmulticast mode [ 342.466760][ T6989] bridge_slave_1: entered promiscuous mode [ 342.529590][ T6786] veth0_macvtap: entered promiscuous mode [ 342.544787][ T6786] veth1_macvtap: entered promiscuous mode [ 342.728111][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.610780][ T29] audit: type=1400 audit(1727410824.623:439): avc: denied { execute } for pid=7069 comm="syz.0.252" name="file0" dev="ramfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 343.853609][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.862959][ T29] audit: type=1400 audit(1727410824.623:440): avc: denied { execute_no_trans } for pid=7069 comm="syz.0.252" path="/34/file0/file0" dev="ramfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 343.887868][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.930066][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.956655][ T6979] bridge_slave_0: entered allmulticast mode [ 343.980105][ T6979] bridge_slave_0: entered promiscuous mode [ 344.035723][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.070878][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.078192][ T6979] bridge_slave_1: entered allmulticast mode [ 344.117017][ T6979] bridge_slave_1: entered promiscuous mode [ 344.266233][ T6989] team0: Port device team_slave_0 added [ 344.285640][ T6979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.683896][ T6989] team0: Port device team_slave_1 added [ 345.063954][ T6979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.331023][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.338073][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.370842][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.399512][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.450430][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.499518][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.607964][ T6979] team0: Port device team_slave_0 added [ 345.621975][ T29] audit: type=1400 audit(1727410826.693:441): avc: denied { write } for pid=7088 comm="syz.0.254" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.839362][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.870667][ T6979] team0: Port device team_slave_1 added [ 345.922342][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.941673][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.958789][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.970412][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.993636][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.004439][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.015714][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.026240][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.047508][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.061785][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.179863][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.247116][ T6880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.261420][ T6786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.290724][ T6786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.299494][ T6786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.312371][ T6786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.327788][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.344061][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.381796][ T29] audit: type=1400 audit(1727410827.423:442): avc: denied { read append } for pid=7101 comm="syz.0.255" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.412745][ T6979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.452620][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.458305][ T29] audit: type=1400 audit(1727410827.433:443): avc: denied { open } for pid=7101 comm="syz.0.255" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.491945][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.529392][ T29] audit: type=1400 audit(1727410827.453:444): avc: denied { map } for pid=7101 comm="syz.0.255" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.530572][ T6979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.554081][ T29] audit: type=1400 audit(1727410827.453:445): avc: denied { write execute } for pid=7101 comm="syz.0.255" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.726845][ T6880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.766546][ T6880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.776935][ T6880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.226266][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.269709][ T6989] hsr_slave_0: entered promiscuous mode [ 347.277222][ T6989] hsr_slave_1: entered promiscuous mode [ 347.288451][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.303662][ T6989] Cannot create hsr debugfs directory [ 347.363666][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.735326][ T6979] hsr_slave_0: entered promiscuous mode [ 348.054845][ T6979] hsr_slave_1: entered promiscuous mode [ 348.082262][ T6979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.124037][ T6979] Cannot create hsr debugfs directory [ 348.646996][ T7106] delete_channel: no stack [ 348.831189][ T2573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.852270][ T2573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.228819][ T52] bridge_slave_1: left allmulticast mode [ 349.234919][ T52] bridge_slave_1: left promiscuous mode [ 349.241138][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.250888][ T52] bridge_slave_0: left allmulticast mode [ 349.257943][ T52] bridge_slave_0: left promiscuous mode [ 349.270059][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.295162][ T52] bridge_slave_1: left allmulticast mode [ 349.311881][ T52] bridge_slave_1: left promiscuous mode [ 349.320651][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.342426][ T52] bridge_slave_0: left allmulticast mode [ 349.348115][ T52] bridge_slave_0: left promiscuous mode [ 349.354263][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.386754][ T29] audit: type=1326 audit(1727410830.453:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f7df39 code=0x7ffc0000 [ 349.440139][ T29] audit: type=1326 audit(1727410830.453:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f7df39 code=0x7ffc0000 [ 349.474314][ T29] audit: type=1326 audit(1727410830.463:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4d9f7c8d0 code=0x7ffc0000 [ 349.507750][ T29] audit: type=1326 audit(1727410830.463:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4d9f7c8d0 code=0x7ffc0000 [ 349.543765][ T29] audit: type=1326 audit(1727410830.463:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d9f7df39 code=0x7ffc0000 [ 350.603420][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.623086][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.641804][ T52] bond0 (unregistering): Released all slaves [ 350.786611][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.804497][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.843223][ T52] bond0 (unregistering): Released all slaves [ 350.914858][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.966356][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.229811][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.388042][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 352.388065][ T29] audit: type=1400 audit(1727410833.453:478): avc: denied { getopt } for pid=7132 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.534886][ T6880] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.672709][ T52] hsr_slave_0: left promiscuous mode [ 352.713962][ T52] hsr_slave_1: left promiscuous mode [ 352.727272][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.751173][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.789452][ T52] hsr_slave_0: left promiscuous mode [ 352.795838][ T52] hsr_slave_1: left promiscuous mode [ 352.809576][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.827266][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.845166][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.856181][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.925634][ T52] veth1_macvtap: left promiscuous mode [ 352.939282][ T52] veth0_macvtap: left promiscuous mode [ 352.954012][ T52] veth1_vlan: left promiscuous mode [ 352.967092][ T52] veth0_vlan: left promiscuous mode [ 352.986191][ T52] veth1_macvtap: left promiscuous mode [ 352.991944][ T52] veth0_macvtap: left promiscuous mode [ 353.005015][ T52] veth1_vlan: left promiscuous mode [ 353.022231][ T52] veth0_vlan: left promiscuous mode [ 355.104244][ T29] audit: type=1400 audit(1727410835.763:479): avc: denied { bind } for pid=7154 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.611122][ T52] team0 (unregistering): Port device team_slave_1 removed [ 355.990365][ T52] team0 (unregistering): Port device team_slave_0 removed [ 356.687542][ T29] audit: type=1400 audit(1727410837.753:480): avc: denied { bind } for pid=7166 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.730090][ T7171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.721403][ T52] team0 (unregistering): Port device team_slave_1 removed [ 358.881983][ T52] team0 (unregistering): Port device team_slave_0 removed [ 359.192568][ T5231] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 361.557952][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.565166][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.702710][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.709973][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.632317][ T6989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.698187][ T6989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.805261][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.884863][ T6989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.951592][ T6989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.424914][ T6979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.454081][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.467278][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.481516][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.498403][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.507596][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 363.696903][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.699942][ T6880] veth0_vlan: entered promiscuous mode [ 363.729486][ T6979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.481980][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.546420][ T6979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.622513][ T7212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.628707][ T7212] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 364.677662][ T7212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.684640][ T7212] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 364.694051][ T6880] veth1_vlan: entered promiscuous mode [ 364.736039][ T7212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.742583][ T7212] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 364.771689][ T7212] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 364.777725][ T7212] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 364.806990][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.841993][ T6979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.867152][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.935024][ T7212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.941127][ T7212] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 365.037240][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.138745][ T6989] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.165316][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.206227][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.213498][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.230236][ T6880] veth0_macvtap: entered promiscuous mode [ 365.263374][ T6880] veth1_macvtap: entered promiscuous mode [ 365.292542][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.299677][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.334942][ T6880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.345550][ T6880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.355835][ T6880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.366379][ T6880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.377642][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.418115][ T6880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.436283][ T6880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.449659][ T6880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.460547][ T6880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.472072][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.566141][ T6880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.584879][ T6880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.600366][ T6880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.609115][ T6880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.645747][ T62] bridge_slave_1: left allmulticast mode [ 365.652037][ T62] bridge_slave_1: left promiscuous mode [ 365.660468][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.681247][ T62] bridge_slave_0: left allmulticast mode [ 365.686940][ T62] bridge_slave_0: left promiscuous mode [ 365.696010][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.050024][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.068547][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.085067][ T62] bond0 (unregistering): Released all slaves [ 366.287773][ T7208] chnl_net:caif_netlink_parms(): no params data found [ 366.449301][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.513217][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.532459][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.558738][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.566357][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.574790][ T7208] bridge_slave_0: entered allmulticast mode [ 366.582183][ T7208] bridge_slave_0: entered promiscuous mode [ 366.594519][ T62] hsr_slave_0: left promiscuous mode [ 366.600726][ T62] hsr_slave_1: left promiscuous mode [ 366.606496][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.614306][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.622630][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.630051][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.652136][ T62] veth1_macvtap: left promiscuous mode [ 366.657715][ T62] veth0_macvtap: left promiscuous mode [ 366.663448][ T62] veth1_vlan: left promiscuous mode [ 366.668756][ T62] veth0_vlan: left promiscuous mode [ 367.087326][ T62] team0 (unregistering): Port device team_slave_1 removed [ 367.133421][ T62] team0 (unregistering): Port device team_slave_0 removed [ 367.538097][ T6989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.548036][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.570407][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.577792][ T7208] bridge_slave_1: entered allmulticast mode [ 367.591837][ T7208] bridge_slave_1: entered promiscuous mode [ 367.614198][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.687779][ T7208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.715008][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.725377][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.730268][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.732574][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.763011][ T7208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.815859][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.823045][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.900735][ T7208] team0: Port device team_slave_0 added [ 367.943265][ T7208] team0: Port device team_slave_1 added [ 368.066099][ T6979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.090179][ T6979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.131122][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.371040][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.135973][ T29] audit: type=1400 audit(1727410850.203:481): avc: denied { setopt } for pid=7246 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.156014][ T7208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.011876][ T7208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.211110][ T29] audit: type=1400 audit(1727410850.203:482): avc: denied { connect } for pid=7246 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.260447][ T7208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.316739][ T7208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.405457][ T7208] hsr_slave_0: entered promiscuous mode [ 370.418847][ T7208] hsr_slave_1: entered promiscuous mode [ 370.655154][ T6989] veth0_vlan: entered promiscuous mode [ 372.574690][ T7266] tmpfs: Bad value for 'mpol' [ 372.858904][ T6989] veth1_vlan: entered promiscuous mode [ 373.115756][ T6989] veth0_macvtap: entered promiscuous mode [ 373.172528][ T6989] veth1_macvtap: entered promiscuous mode [ 373.382312][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.719523][ T29] audit: type=1400 audit(1727410854.723:483): avc: denied { remount } for pid=7267 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 373.887108][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.964650][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.238850][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.264987][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.298535][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.468738][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.497755][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.684262][ T6989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.696277][ T6989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.707899][ T6989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.673730][ T29] audit: type=1400 audit(1727410856.743:484): avc: denied { write } for pid=7269 comm="syz.2.272" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 375.746678][ T6989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.757643][ T6989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.801208][ T6989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.818896][ T6989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.049624][ T6979] veth0_vlan: entered promiscuous mode [ 377.190967][ T6979] veth1_vlan: entered promiscuous mode [ 377.391218][ T6979] veth0_macvtap: entered promiscuous mode [ 377.417458][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.445190][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.487763][ T6979] veth1_macvtap: entered promiscuous mode [ 377.559378][ T7208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.581115][ T7208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.603983][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.625141][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.646350][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.663558][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.676515][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.694405][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.709184][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.733897][ T7208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.757403][ T2573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.769116][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.788507][ T2573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.798985][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.816558][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.834477][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.852008][ T6979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.869727][ T6979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.884690][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.905760][ T7208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.993316][ T6979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.029392][ T6979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.079446][ T6979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.104217][ T6979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.079820][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.146653][ T5274] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 380.273634][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.347548][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.387975][ T7208] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.438627][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.445809][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.531463][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.538674][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.694395][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.740640][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.050383][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 381.078255][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 381.115725][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.200350][ T5274] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.209787][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.390597][ T5274] usb 1-1: config 0 descriptor?? [ 381.431518][ T7291] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.510447][ T29] audit: type=1400 audit(1727410862.573:485): avc: denied { listen } for pid=7315 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.697834][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.739181][ T7208] veth0_vlan: entered promiscuous mode [ 381.754993][ T7208] veth1_vlan: entered promiscuous mode [ 381.852125][ T7208] veth0_macvtap: entered promiscuous mode [ 381.898563][ T5274] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 381.906947][ T5274] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 381.955337][ T5274] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 381.969077][ T7208] veth1_macvtap: entered promiscuous mode [ 382.229506][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.274760][ T25] usb 1-1: USB disconnect, device number 8 [ 382.277338][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.296718][ T7331] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 382.331174][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.594745][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.616798][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.456021][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.487019][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.530172][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.575564][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.584990][ T7341] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 383.682336][ T29] audit: type=1326 audit(1727410864.743:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7340 comm="syz.2.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6efd7df39 code=0x0 [ 383.751735][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.792866][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.829424][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.881403][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.887845][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.897051][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.955377][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.006709][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.056022][ T7208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.078468][ T7208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.107524][ T7208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.273135][ T7208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.307300][ T7208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.323202][ T7208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.353142][ T7208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.358613][ T7354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7354 comm=syz.4.285 [ 385.851729][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.027555][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.407463][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.447692][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.032773][ T29] audit: type=1400 audit(1727410867.423:487): avc: denied { map } for pid=7367 comm="syz.3.287" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 396.835800][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.846747][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.895370][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.923957][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.932922][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 396.940398][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.070719][ T5229] Bluetooth: hci1: command tx timeout [ 399.613686][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 400.021431][ T29] audit: type=1400 audit(1727410881.083:488): avc: denied { mount } for pid=7464 comm="syz.1.303" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 400.098033][ T29] audit: type=1400 audit(1727410881.163:489): avc: denied { setattr } for pid=7464 comm="syz.1.303" name="sequencer2" dev="devtmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 400.231079][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.342367][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.384640][ T7428] bridge_slave_0: entered allmulticast mode [ 400.428753][ T7428] bridge_slave_0: entered promiscuous mode [ 400.504587][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.531303][ T29] audit: type=1800 audit(1727410881.593:490): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.303" name="/sequencer2" dev="devtmpfs" ino=1088 res=0 errno=0 [ 400.554498][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.600433][ T7428] bridge_slave_1: entered allmulticast mode [ 400.630335][ T7428] bridge_slave_1: entered promiscuous mode [ 400.668986][ T29] audit: type=1400 audit(1727410881.723:491): avc: denied { unmount } for pid=7208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 400.839392][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.908785][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.110396][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 401.220347][ T5229] Bluetooth: hci1: command tx timeout [ 401.261567][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 401.286467][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.096489][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 402.107989][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 402.119586][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 402.129212][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.178656][ T9] usb 5-1: config 0 descriptor?? [ 402.203455][ T7488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.212657][ T9] hub 5-1:0.0: USB hub found [ 402.406694][ T7428] team0: Port device team_slave_0 added [ 402.432778][ T7428] team0: Port device team_slave_1 added [ 402.458816][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 402.522420][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.529527][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.569753][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.583944][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.599628][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.643312][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.930778][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 403.938193][ T5229] Bluetooth: hci1: command tx timeout [ 404.176274][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 404.226569][ T7428] hsr_slave_0: entered promiscuous mode [ 404.515121][ T7428] hsr_slave_1: entered promiscuous mode [ 404.570688][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.603924][ T7428] Cannot create hsr debugfs directory [ 404.989173][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 405.975752][ T5229] Bluetooth: hci1: command tx timeout [ 406.025739][ T9] usb 5-1: USB disconnect, device number 3 [ 406.226651][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.240752][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.249121][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.261683][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.280403][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 406.287612][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.302389][ T7428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.660985][ T5231] Bluetooth: hci6: command tx timeout [ 411.774603][ T5231] Bluetooth: hci6: command tx timeout [ 411.893671][ T7428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.319056][ T7558] mmap: syz.1.315 (7558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 412.413210][ T7428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.646563][ T7428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.790608][ T5231] Bluetooth: hci6: command tx timeout [ 414.980882][ T62] bridge_slave_1: left allmulticast mode [ 414.986556][ T62] bridge_slave_1: left promiscuous mode [ 415.049797][ T7577] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 415.051901][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.068744][ T29] audit: type=1400 audit(1727410896.113:492): avc: denied { create } for pid=7575 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 415.088328][ T29] audit: type=1400 audit(1727410896.113:493): avc: denied { bind } for pid=7575 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 415.182316][ T62] bridge_slave_0: left allmulticast mode [ 415.208935][ T62] bridge_slave_0: left promiscuous mode [ 415.215190][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.390305][ T5307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 415.584891][ T5307] usb 5-1: Using ep0 maxpacket: 32 [ 415.642057][ T5307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.730313][ T5307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.740135][ T5307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.770056][ T5307] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 415.874547][ T5231] Bluetooth: hci6: command tx timeout [ 416.455547][ T5307] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 416.574769][ T5307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.584278][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.592757][ T5307] usb 5-1: Product: syz [ 416.597947][ T5307] usb 5-1: Manufacturer: syz [ 416.602898][ T5307] usb 5-1: SerialNumber: syz [ 417.711245][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 417.868494][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.896090][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.909926][ T62] bond0 (unregistering): Released all slaves [ 417.918393][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 417.926168][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.950453][ T25] usb 3-1: config 0 has no interfaces? [ 417.968920][ T25] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 417.978627][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.002312][ T25] usb 3-1: Product: syz [ 418.006706][ T25] usb 3-1: Manufacturer: syz [ 418.050982][ T25] usb 3-1: SerialNumber: syz [ 418.081284][ T25] usb 3-1: config 0 descriptor?? [ 418.172892][ T5307] cdc_ncm 5-1:1.0: bind() failure [ 418.186050][ T5307] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 418.211753][ T5307] cdc_ncm 5-1:1.1: bind() failure [ 418.259587][ T5307] usb 5-1: USB disconnect, device number 4 [ 418.658114][ T62] hsr_slave_0: left promiscuous mode [ 418.682967][ T62] hsr_slave_1: left promiscuous mode [ 418.708504][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.742493][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.774588][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.802138][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.895349][ T62] veth1_macvtap: left promiscuous mode [ 418.914135][ T62] veth0_macvtap: left promiscuous mode [ 418.941009][ T62] veth1_vlan: left promiscuous mode [ 418.958274][ T62] veth0_vlan: left promiscuous mode [ 419.368753][ T7635] [ 419.371135][ T7635] ====================================================== [ 419.378181][ T7635] WARNING: possible circular locking dependency detected [ 419.385226][ T7635] 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 Not tainted [ 419.391991][ T7635] ------------------------------------------------------ [ 419.399016][ T7635] syz.4.322/7635 is trying to acquire lock: [ 419.404918][ T7635] ffff888024d14aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 419.415687][ T7635] [ 419.415687][ T7635] but task is already holding lock: [ 419.423056][ T7635] ffff88801b076a18 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 419.433097][ T7635] [ 419.433097][ T7635] which lock already depends on the new lock. [ 419.433097][ T7635] [ 419.443505][ T7635] [ 419.443505][ T7635] the existing dependency chain (in reverse order) is: [ 419.452530][ T7635] [ 419.452530][ T7635] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 419.460128][ T7635] down_read_killable+0x9d/0x380 [ 419.465620][ T7635] lock_mm_and_find_vma+0x3a9/0x6a0 [ 419.471465][ T7635] do_user_addr_fault+0x2b5/0x13f0 [ 419.477225][ T7635] exc_page_fault+0x5c/0xc0 [ 419.482356][ T7635] asm_exc_page_fault+0x26/0x30 [ 419.487771][ T7635] fault_in_readable+0x126/0x230 [ 419.493356][ T7635] fault_in_iov_iter_readable+0x101/0x2c0 [ 419.499655][ T7635] generic_perform_write+0x21b/0x920 [ 419.505500][ T7635] shmem_file_write_iter+0x10e/0x140 [ 419.511336][ T7635] vfs_write+0x6b5/0x1140 [ 419.516227][ T7635] ksys_write+0x12f/0x260 [ 419.521109][ T7635] do_syscall_64+0xcd/0x250 [ 419.526154][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.532608][ T7635] [ 419.532608][ T7635] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 419.541336][ T7635] __lock_acquire+0x250b/0x3ce0 [ 419.546738][ T7635] lock_acquire+0x1b1/0x560 [ 419.551795][ T7635] down_write+0x93/0x200 [ 419.556581][ T7635] process_measurement+0x39c/0x2370 [ 419.562314][ T7635] ima_file_mmap+0x146/0x1d0 [ 419.567437][ T7635] security_mmap_file+0x8bd/0x990 [ 419.573004][ T7635] __do_sys_remap_file_pages+0x526/0x900 [ 419.579177][ T7635] do_syscall_64+0xcd/0x250 [ 419.584223][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.590675][ T7635] [ 419.590675][ T7635] other info that might help us debug this: [ 419.590675][ T7635] [ 419.600904][ T7635] Possible unsafe locking scenario: [ 419.600904][ T7635] [ 419.608359][ T7635] CPU0 CPU1 [ 419.613735][ T7635] ---- ---- [ 419.619109][ T7635] lock(&mm->mmap_lock); [ 419.623464][ T7635] lock(&sb->s_type->i_mutex_key#12); [ 419.631473][ T7635] lock(&mm->mmap_lock); [ 419.638343][ T7635] lock(&sb->s_type->i_mutex_key#12); [ 419.643833][ T7635] [ 419.643833][ T7635] *** DEADLOCK *** [ 419.643833][ T7635] [ 419.651999][ T7635] 1 lock held by syz.4.322/7635: [ 419.656945][ T7635] #0: ffff88801b076a18 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 419.667422][ T7635] [ 419.667422][ T7635] stack backtrace: [ 419.673326][ T7635] CPU: 1 UID: 0 PID: 7635 Comm: syz.4.322 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 419.683607][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.693787][ T7635] Call Trace: [ 419.697076][ T7635] [ 419.700015][ T7635] dump_stack_lvl+0x116/0x1f0 [ 419.704712][ T7635] print_circular_bug+0x419/0x5d0 [ 419.709791][ T7635] check_noncircular+0x31a/0x400 [ 419.714769][ T7635] ? __pfx_check_noncircular+0x10/0x10 [ 419.720261][ T7635] ? register_lock_class+0xb1/0x1240 [ 419.725585][ T7635] ? lockdep_lock+0xc6/0x200 [ 419.730202][ T7635] ? __pfx_lockdep_lock+0x10/0x10 [ 419.735256][ T7635] __lock_acquire+0x250b/0x3ce0 [ 419.740150][ T7635] ? __pfx___lock_acquire+0x10/0x10 [ 419.745384][ T7635] ? hlock_class+0x4e/0x130 [ 419.749910][ T7635] lock_acquire+0x1b1/0x560 [ 419.754443][ T7635] ? process_measurement+0x39c/0x2370 [ 419.759840][ T7635] ? __pfx_lock_acquire+0x10/0x10 [ 419.764895][ T7635] ? __pfx_ima_match_policy+0x10/0x10 [ 419.770292][ T7635] ? __pfx___might_resched+0x10/0x10 [ 419.775685][ T7635] ? hlock_class+0x4e/0x130 [ 419.780210][ T7635] down_write+0x93/0x200 [ 419.784468][ T7635] ? process_measurement+0x39c/0x2370 [ 419.789851][ T7635] ? __pfx_down_write+0x10/0x10 [ 419.794724][ T7635] process_measurement+0x39c/0x2370 [ 419.799946][ T7635] ? __pfx_process_measurement+0x10/0x10 [ 419.805596][ T7635] ? avc_has_perm_noaudit+0x119/0x3a0 [ 419.810997][ T7635] ? __pfx_lock_release+0x10/0x10 [ 419.816051][ T7635] ? __pfx___lock_acquire+0x10/0x10 [ 419.821401][ T7635] ? file_map_prot_check+0x1eb/0x360 [ 419.826720][ T7635] ima_file_mmap+0x146/0x1d0 [ 419.831343][ T7635] ? __pfx_ima_file_mmap+0x10/0x10 [ 419.836472][ T7635] ? __pfx_down_write_killable+0x10/0x10 [ 419.842166][ T7635] security_mmap_file+0x8bd/0x990 [ 419.847217][ T7635] __do_sys_remap_file_pages+0x526/0x900 [ 419.852880][ T7635] ? __pfx_do_futex+0x10/0x10 [ 419.857588][ T7635] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 419.863867][ T7635] ? __x64_sys_futex+0x1e1/0x4c0 [ 419.868834][ T7635] ? xfd_validate_state+0x5d/0x180 [ 419.873994][ T7635] do_syscall_64+0xcd/0x250 [ 419.878529][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.884481][ T7635] RIP: 0033:0x7f03f357df39 [ 419.889007][ T7635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.908637][ T7635] RSP: 002b:00007f03f436e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 419.917078][ T7635] RAX: ffffffffffffffda RBX: 00007f03f3736058 RCX: 00007f03f357df39 [ 419.925074][ T7635] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020c01000 [ 419.933067][ T7635] RBP: 00007f03f35f0216 R08: 0000000000000000 R09: 0000000000000000 [ 419.941058][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.949046][ T7635] R13: 0000000000000000 R14: 00007f03f3736058 R15: 00007ffc6df05ae8 [ 419.957046][ T7635] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 420.032096][ T58] usb 3-1: USB disconnect, device number 3 [ 420.195381][ T29] audit: type=1400 audit(1727410901.263:494): avc: denied { ioctl } for pid=7633 comm="syz.4.322" path="socket:[21377]" dev="sockfs" ino=21377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.927219][ T62] team0 (unregistering): Port device team_slave_1 removed [ 420.964185][ T62] team0 (unregistering): Port device team_slave_0 removed [ 421.277741][ T7428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.842394][ T62] IPVS: stop unused estimator thread 0... [ 421.909597][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.973065][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.046383][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.104668][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.221880][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.268404][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.327982][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.398555][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.497056][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.535619][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.586488][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.646814][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.738072][ T62] bridge_slave_1: left allmulticast mode [ 422.744403][ T62] bridge_slave_1: left promiscuous mode [ 422.752990][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.766010][ T62] bridge_slave_0: left allmulticast mode [ 422.774838][ T62] bridge_slave_0: left promiscuous mode [ 422.781369][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.791654][ T62] bridge_slave_1: left allmulticast mode [ 422.797331][ T62] bridge_slave_1: left promiscuous mode [ 422.803349][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.813286][ T62] bridge_slave_0: left allmulticast mode [ 422.818965][ T62] bridge_slave_0: left promiscuous mode [ 422.824688][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.835800][ T62] bridge_slave_1: left allmulticast mode [ 422.841603][ T62] bridge_slave_1: left promiscuous mode [ 422.847291][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.860124][ T62] bridge_slave_0: left allmulticast mode [ 422.868040][ T62] bridge_slave_0: left promiscuous mode [ 422.874369][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.293320][ T62] bond0 (unregistering): Released all slaves [ 423.306916][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.317168][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.327124][ T62] bond0 (unregistering): Released all slaves [ 423.342231][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.352792][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.363655][ T62] bond0 (unregistering): Released all slaves [ 423.376084][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.387489][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.397908][ T62] bond0 (unregistering): Released all slaves [ 423.814737][ T62] hsr_slave_0: left promiscuous mode [ 423.822534][ T62] hsr_slave_1: left promiscuous mode [ 423.828370][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.839516][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.852011][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.859464][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.873778][ T62] hsr_slave_0: left promiscuous mode [ 423.879775][ T62] hsr_slave_1: left promiscuous mode [ 423.891018][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.898533][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.911659][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.919116][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.932151][ T62] hsr_slave_0: left promiscuous mode [ 423.937978][ T62] hsr_slave_1: left promiscuous mode [ 423.947303][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.955577][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.965824][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.973840][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.990136][ T62] veth1_macvtap: left promiscuous mode [ 423.996096][ T62] veth0_macvtap: left promiscuous mode [ 424.003775][ T62] veth1_vlan: left promiscuous mode [ 424.009443][ T62] veth0_vlan: left promiscuous mode [ 424.015981][ T62] veth1_macvtap: left promiscuous mode [ 424.021671][ T62] veth0_macvtap: left promiscuous mode [ 424.027274][ T62] veth1_vlan: left promiscuous mode [ 424.033171][ T62] veth0_vlan: left promiscuous mode [ 424.039158][ T62] veth1_macvtap: left promiscuous mode [ 424.045063][ T62] veth0_macvtap: left promiscuous mode [ 424.050710][ T62] veth1_vlan: left promiscuous mode [ 424.056008][ T62] veth0_vlan: left promiscuous mode [ 424.310097][ T62] team0 (unregistering): Port device team_slave_1 removed [ 424.337649][ T62] team0 (unregistering): Port device team_slave_0 removed [ 424.499901][ T62] team0 (unregistering): Port device team_slave_1 removed [ 424.534310][ T62] team0 (unregistering): Port device team_slave_0 removed [ 424.706520][ T62] team0 (unregistering): Port device team_slave_1 removed [ 424.736934][ T62] team0 (unregistering): Port device team_slave_0 removed [ 425.489453][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.538067][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.587967][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.656202][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.959100][ T62] bridge_slave_1: left allmulticast mode [ 425.966554][ T62] bridge_slave_1: left promiscuous mode [ 425.972908][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.982975][ T62] bridge_slave_0: left allmulticast mode [ 425.988665][ T62] bridge_slave_0: left promiscuous mode [ 425.995407][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.005802][ T62] bridge_slave_1: left allmulticast mode [ 426.012129][ T62] bridge_slave_1: left promiscuous mode [ 426.017867][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.027506][ T62] bridge_slave_0: left allmulticast mode [ 426.033644][ T62] bridge_slave_0: left promiscuous mode [ 426.039366][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.206007][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.216678][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.226588][ T62] bond0 (unregistering): Released all slaves [ 426.236331][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.247137][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.256994][ T62] bond0 (unregistering): Released all slaves [ 426.445574][ T62] hsr_slave_0: left promiscuous mode [ 426.451591][ T62] hsr_slave_1: left promiscuous mode [ 426.457406][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.466080][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.479379][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.487182][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.497246][ T62] hsr_slave_0: left promiscuous mode [ 426.503225][ T62] hsr_slave_1: left promiscuous mode [ 426.509030][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.516756][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.526119][ T62] veth1_macvtap: left promiscuous mode [ 426.531729][ T62] veth0_macvtap: left promiscuous mode [ 426.537268][ T62] veth1_vlan: left promiscuous mode [ 426.542593][ T62] veth0_vlan: left promiscuous mode [ 426.666024][ T62] team0 (unregistering): Port device team_slave_1 removed [ 426.695366][ T62] team0 (unregistering): Port device team_slave_0 removed [ 426.825239][ T62] team0 (unregistering): Port device team_slave_1 removed [ 426.842550][ T62] team0 (unregistering): Port device team_slave_0 removed