last executing test programs: 2m51.971956708s ago: executing program 2 (id=48): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$getown(r1, 0x9) socket$netlink(0x10, 0x3, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x128023, 0x170) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8647e2b7f43be400"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ppoll(&(0x7f0000000380)=[{r4}, {r5, 0xcaf9ef0804dd3d30}], 0x2, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r6, 0x5409, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2m49.330666721s ago: executing program 2 (id=54): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m48.757267592s ago: executing program 2 (id=57): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0xed49a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) shmdt(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1}, 0x1c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2m45.953451538s ago: executing program 4 (id=64): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, 0x0, &(0x7f0000000040)) 2m45.458530809s ago: executing program 4 (id=65): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m41.808735042s ago: executing program 4 (id=69): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f0100000000000000000009058202000200000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2m36.70244831s ago: executing program 4 (id=76): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x8, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r7 = socket(0x7918f5c1b9e77f87, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200c4850}, 0x4000081) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x290, 0x168, 0x9, 0x0, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private0, [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x290, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000120009040000000000000000e0000001000090500000000000000000fffffffc0000ff00"], 0x28}}, 0x0) 2m32.300456778s ago: executing program 4 (id=84): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.603824322s ago: executing program 4 (id=86): r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6c882, 0x0) sendfile(r5, r5, 0x0, 0x100000002) fanotify_mark(r0, 0x101, 0x0, r1, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r7 = socket$kcm(0x10, 0x3, 0x10) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000480)='./file3\x00', &(0x7f00000004c0), 0x200020, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d72646d612c38d186c2f636a3066008d52c706f72743d3078306930303030303030303030346532342c73713d3078303030303030303030303030303030332c70726976706f72742c73713d3078303030303030303030303030303030322c72713d3078303030303030303030303030303030352c74696d656f75743d307830303030303032322c686173682c66756e633d46494c455f434845434b2c7375626a5f757365723d2d282f4021b6a23fddd6a8ee0b82bfaa2c736d61636b6673666c6f6f723d2f64650000000000000000"]) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)="c3db32903453b3f3f48e6c6fdceb119f8040466741d8d499447516420e0e19033a1c90ed20e6af3014772bc598433ddd80e128b5dc9878d34b66d9889b055c26f3e5100714d8549c283e3d7bf2d69515786acc71a0a6f2d741b588eb6828f3c355f2d134284c20f07f68d4e9e47618151c7429f7a70d763540b0ba6bf6846da1623f77e40e820d2f85cc44ea255a9976f253", 0x92}], 0x1}}], 0x1, 0x0) lstat(&(0x7f0000000240)='./file3\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x3, 0x0, 0x62, 0x31, 0x61, 0xb, 0x30], 0x2d, [0x36, 0x62, 0x51, 0x62], 0x2d, [0x32, 0x35, 0x63, 0x39], 0x2d, [0x30, 0x36, 0x38, 0x30], 0x2d, [0x61, 0x63, 0x66, 0x52, 0x38, 0x63, 0x33, 0x61]}}}]}) fsopen(&(0x7f0000000100)='ntfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a80)=@allocspi={0x108, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast, 0x4000, 0x33}, @in6=@loopback}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @proto={0x5}]}, 0x108}}, 0x0) 1m39.318007019s ago: executing program 2 (id=74): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fcdbdf250000000008000500", @ANYRES32, @ANYBLOB="24000300a05ca84f6c9c00000000fd7a70ae0fb20fa152600cb0084517"], 0x6c}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) read$eventfd(r2, &(0x7f0000000380), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x11}]}]}}}]}, 0x90}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) r13 = dup2(r7, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r13}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x3a4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "cd33a1e5b063891ce7d275dda3956b258ba5310b47"}}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "9c172cc366cf1eea38071a98ec5b72cffd17bddf859a383a1f9dbdf4041cd8b3dffeef31dec81d80df859d526dfaca7d148db1bf50245861a279e82c2c4659d85008f6e36abd6fbd487cb1d285d06ff8df84619e7b8a215512f823eb907a16cb4db1648f8d2286ec0e8a64367d3eced604ec957535984bdaeee6b2f2acc487c494e8a55608ee23f6686844be26039ac911986575e741e4f9c36ff7e527e70bcea9ea121732fbc75c1a08907df81d14599d766558"}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c40d6a84f5096b6d6411d7e6e3905c2716fd9ab174"}}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "12d62ce6b96a32c873e2a308c8a512b257ebfb71befc21559b1a1462cc518d5c21ccbbc1150948554d5045c776c89c68b54fb7cfa3026fd0a5634be13f212c453d37eb39121ab0817f48"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb393}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 31.641439896s ago: executing program 3 (id=232): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 29.319921173s ago: executing program 3 (id=237): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="980000001800190e00000000000000000a000000000000000000000008000600010000003100088000022e0c4eb724fddd6c4cf3850292782a312de246ff12a45d99fb9ecfa3930b580554cbe38c34baad4895797100000014000500fc0200000000", @ANYRES32, @ANYBLOB="080017000400", @ANYRES32=0x0, @ANYBLOB="0c00000600337e0000"], 0x98}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x3c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0xd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x40187014, &(0x7f0000000040)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="00001000ee001000072ba3f34be2d9e9ee78257b25cf9abd3689954c2c442d6e575e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x84, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x5a}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ddeb5ea58134d120f45ca61140"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x8800) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001599895e06e0f7c3521"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) 28.841214104s ago: executing program 1 (id=239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) close(r1) r2 = io_uring_setup(0x168e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) 27.869216581s ago: executing program 0 (id=242): r0 = socket(0x22, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001000)) 27.472604593s ago: executing program 0 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) syz_emit_ethernet(0x1da, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f00000000c0), 0x3f) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x3, 'lblc\x00'}, 0x2c) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @private, 0x0, 0x3, 'dh\x00'}, 0x2c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) 25.444242112s ago: executing program 3 (id=244): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 24.852486845s ago: executing program 1 (id=245): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) 24.39151284s ago: executing program 1 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket(0x2, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000004780)=[{{&(0x7f00000031c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f00000000c0)=[{0x5, 0x6, 0x0, 0x1}, {0x2, 0x8, 0x7, 0x2}, {0x5, 0x5, 0x0, 0x8}, {0x0, 0x0, 0x4, 0xffffd193}, {0xf20b, 0xb, 0x0, 0x2}, {0xc0, 0x0, 0xfc, 0x1000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x0, 0x0, 0x8}, 0x48) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 2.517524255s ago: executing program 2 (id=165): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x48d, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x457, 0x3a, 0x0, @dev, @dev, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c25"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x1, "d429145c793e823829b43763"}, {0x0, 0x76, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x0, 0x3, 0x0, 0x5, 0x0, 0x3ff, [{0x0, 0x0, 0x6}, {0x0, 0x3}, {0x0, 0x0, 0x185}]}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/153, 0x4b, 0x99, 0x0, 0x6}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_EXTTS_REQUEST2(r2, 0x541b, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2007e33d4b000000800450000280000000000069078ac1414bbac1414aa00004e22f198b012e49a2b5ac551a9f30b159ebb1ddfa9a96aeee33b156a8e715a31666086651f1983052357cea2881efb79", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090"], 0x0) 2.515696514s ago: executing program 0 (id=255): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='msdos\x00', 0x18642, 0x0) 2.513453092s ago: executing program 1 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]]}, 0x34}}, 0x0) 2.512251217s ago: executing program 3 (id=257): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x20000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r6}, 0x20) ioctl$int_in(r6, 0x5452, &(0x7f0000000780)) recvmmsg(r6, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 900.567509ms ago: executing program 2 (id=247): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 899.718882ms ago: executing program 3 (id=248): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0xdc) 889.644673ms ago: executing program 0 (id=259): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x20000007d, 0x0) 888.183578ms ago: executing program 1 (id=249): r0 = eventfd2(0x4, 0xc4d49bfe19c7c674) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1, r0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0xd0, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) socket$inet_icmp(0x2, 0x2, 0x1) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcf, 0x0, 0x0) r5 = dup(r3) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40401) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000040)=0x81) fanotify_mark(r2, 0x1, 0x4000105b, r5, 0x0) r7 = epoll_create(0x2) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) r9 = dup(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{}, {}, @device_b, @device_a, @broadcast, {}, @device_b}, @a_msdu}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x58}}, 0x0) write$uinput_user_dev(r9, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [], [0x80000001], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x81]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) write$FUSE_BMAP(r9, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x800003}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f00000000c0)={0x30000015}) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) pselect6(0x40, &(0x7f00000000c0)={0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 538.348537ms ago: executing program 0 (id=250): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4d) setresuid(0x0, r2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$setown(r0, 0x8, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x4044881) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 479.557806ms ago: executing program 3 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x26, 0x0, "8ddbb5062cfd03080000000000e4dc036d58b39fa8d54ee832040000bdfba71bc4b828c7de258b0172a1fc52bca0dd2a000000000000000000001600000000000000000000000000000000000000002c"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='percpu_destroy_chunk\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xb, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX]) dup(0xffffffffffffffff) fcntl$dupfd(r0, 0x0, r0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000500)={0xa, 0x4e20, 0x5, @mcast1, 0xf}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000005c0)="513eabc86e78dba7a5b8276ab2a1e30e30bb81290bba5c693b78b2cfc570cd9424ba9dc596e7bb92f70a2ee78fd54fc37cb3e8567ea34bc12c26eaaace13d1c56ddea24445a4ed3bfc0cdbe43f8aeb246c72b9c399b0dd726ee0d04423169a1d0be036d55e", 0x65}], 0x1, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x2f, 0x22, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x1, [0x0, 0x8, 0x9, 0x5, 0x0, 0xe, 0x5]}}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x5, 0xb8, "37c57acf922571183a80a1ac765864f28cc8a34dce14994e3483209cd5e64072751311d3a5737038c0a6d1f47e6edac67ec06333c3609999459b75b691506c485543083a9e8eac861b550ae831e3baebaedcf430a38e5fb217ccb0f3331563ecce4974abf98053ea5a688357f3596c5978dcbe73d20b58999a829cbeafc31ee961d2b92fed1fb032b32684804995a988d16b67cfb810a0f4e91af45d6b0686a8e0e5c927bde8d8550a60020174fc90b3a7065e6da3fd5608"}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x32, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x2, 0xe, 0x20, 0x3, [0x5, 0x66, 0x9, 0x4, 0x5, 0x8000000000000001, 0x5]}}]}}}], 0x1a8}}, {{&(0x7f0000000840)={0xa, 0x4e22, 0x44, @remote}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000880)="ca5f177cb594b713e1507a0ba1134d300091360fb2f24abe4521828b2059ba310e5a306ac18eee4d1d81d245", 0x2c}, {&(0x7f00000008c0)="6b6b62fc4b66b4dca8ac34bec465da639aa5ec1f3ba4ad56d6a5117c8c0a209ee24a0c3ae304021bffaa564074c0ad858c68607cf839db3191c38d738b2c60dfa38d850ea349d50e7bdbea17e39a2706b7535e9c73371dd2beba2ae147bdbb3fd43bd41e61df9fb1896d3812ac3fcf4a976b0bcc1894d6346cbc5edd38096677ccce3a382110a53b3967c17621934b8f8b855e1007d51485311416a78740c13f4a8897eeb68d4e4e2c3a8b1a50f220199f", 0xb1}], 0x2, &(0x7f00000009c0)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x1, 0x0, 0x0, [@remote, @mcast1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback]}}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xfffffe01}]}}}], 0xd8}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0xfffffffa, @mcast2, 0x7ff}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="f72b78a404133726a1e7582626332ab1f89876fb2b55322ccb5e3875254f034dfd766e19d2c4ebb15fa688178722b7d49196b3ead3be5932dbd0b4b8e0ac251032673a09edc41366ee1fa8e9e44bc40d2b576039dd2f4155e20a238e8d28baf09de5ccf59ab07078c933d079ac50a4bc829cff7a8844f591ec5fb773fc598c5f16ca37b1e624ea9fd992d1bc9341f9e92adf60826604be79a50e43bafb99057ba9bf3058ab290f029838e29fa843ab974012c230d7ea415d4f5562", 0xbb}, {&(0x7f0000000bc0)="801682dfc9f4673d603bf805fcd4bb3d41159d32d128d21c91d2fb46d9431f4e10d7b8c971e78d93a96345431e", 0x2d}, {&(0x7f0000000c00)="371389793828c097527ee33e76fada44e41b0fa47088f37cb37321d890e56e8f2bb6204860742705aba5e1e6e3ad73b7dc5a0538b2ac31571f92444714cc2d393153c70917826602c47ce86f597a624568d9571c", 0x54}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)}, {0x0}, {&(0x7f0000000e00)}], 0x7, &(0x7f0000000f40)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2e, 0xc, 0x2, 0x7, 0x0, [@mcast2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0xa8}}], 0x3, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}}, 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 326.429404ms ago: executing program 1 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}) getdents(r1, &(0x7f0000000240)=""/145, 0x91) lseek(r1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0xeed, &(0x7f0000000780), &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12) 0s ago: executing program 0 (id=253): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000800)=[{r3}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, 0x0, 0x0) kernel console output (not intermixed with test programs): .863612][ T5221] team0: Port device team_slave_1 added [ 111.910445][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.917487][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.943801][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.958903][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.966736][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.993724][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.007178][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.014522][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.021767][ T5225] bridge_slave_0: entered allmulticast mode [ 112.030655][ T5225] bridge_slave_0: entered promiscuous mode [ 112.107167][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.114530][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.122049][ T5225] bridge_slave_1: entered allmulticast mode [ 112.131124][ T5225] bridge_slave_1: entered promiscuous mode [ 112.162533][ T5224] team0: Port device team_slave_0 added [ 112.174202][ T5224] team0: Port device team_slave_1 added [ 112.189632][ T5220] team0: Port device team_slave_0 added [ 112.200118][ T5220] team0: Port device team_slave_1 added [ 112.227092][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.234156][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.260443][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.352253][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.359411][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.385938][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.430492][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.438088][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.464624][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.500824][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.517332][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.567266][ T5227] hsr_slave_0: entered promiscuous mode [ 112.575947][ T5227] hsr_slave_1: entered promiscuous mode [ 112.585274][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.592245][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.619706][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.632162][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.639669][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.665654][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.679921][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.686987][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.713367][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.809298][ T5225] team0: Port device team_slave_0 added [ 112.821192][ T5225] team0: Port device team_slave_1 added [ 112.967002][ T5221] hsr_slave_0: entered promiscuous mode [ 112.974718][ T5221] hsr_slave_1: entered promiscuous mode [ 112.981179][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.990051][ T5221] Cannot create hsr debugfs directory [ 113.079809][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.087392][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.114267][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.152736][ T5224] hsr_slave_0: entered promiscuous mode [ 113.160781][ T5224] hsr_slave_1: entered promiscuous mode [ 113.167319][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.175380][ T5224] Cannot create hsr debugfs directory [ 113.211299][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.218552][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.244820][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.265156][ T5220] hsr_slave_0: entered promiscuous mode [ 113.271887][ T5220] hsr_slave_1: entered promiscuous mode [ 113.278696][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.287029][ T5220] Cannot create hsr debugfs directory [ 113.421892][ T5234] Bluetooth: hci1: command tx timeout [ 113.427559][ T5232] Bluetooth: hci0: command tx timeout [ 113.495169][ T5232] Bluetooth: hci2: command tx timeout [ 113.575046][ T5232] Bluetooth: hci4: command tx timeout [ 113.654755][ T5232] Bluetooth: hci3: command tx timeout [ 113.671237][ T5225] hsr_slave_0: entered promiscuous mode [ 113.678312][ T5225] hsr_slave_1: entered promiscuous mode [ 113.689165][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.697052][ T5225] Cannot create hsr debugfs directory [ 114.103197][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.174540][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.214040][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.227165][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.389177][ T5221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.411097][ T5221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.424590][ T5221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.447039][ T5221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.587299][ T5220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.618831][ T5220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.632155][ T5220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.648638][ T5220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.862789][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.900362][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.949407][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.030679][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.128857][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.146736][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.196996][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.213208][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.229507][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.243466][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.331810][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.366664][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.374266][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.400941][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.436015][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.443218][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.480598][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.487858][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.498868][ T5234] Bluetooth: hci1: command tx timeout [ 115.504661][ T5232] Bluetooth: hci0: command tx timeout [ 115.561822][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.569105][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.585457][ T5232] Bluetooth: hci2: command tx timeout [ 115.598406][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.655387][ T5232] Bluetooth: hci4: command tx timeout [ 115.734991][ T5232] Bluetooth: hci3: command tx timeout [ 115.758292][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.797475][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.804900][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.817172][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.824559][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.983875][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.117620][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.124553][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 116.124573][ T29] audit: type=1400 audit(1723604612.307:113): avc: denied { sys_module } for pid=5227 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.168075][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.175363][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.260308][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.267619][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.561960][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.681211][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.732826][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.751895][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.841630][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.848974][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.921841][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.929691][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.230373][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.240878][ T5221] veth0_vlan: entered promiscuous mode [ 117.251164][ T5227] veth0_vlan: entered promiscuous mode [ 117.320659][ T5227] veth1_vlan: entered promiscuous mode [ 117.346433][ T5221] veth1_vlan: entered promiscuous mode [ 117.381206][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.578551][ T5232] Bluetooth: hci0: command tx timeout [ 117.578576][ T5234] Bluetooth: hci1: command tx timeout [ 117.616607][ T5227] veth0_macvtap: entered promiscuous mode [ 117.652325][ T5221] veth0_macvtap: entered promiscuous mode [ 117.658645][ T5234] Bluetooth: hci2: command tx timeout [ 117.732749][ T5221] veth1_macvtap: entered promiscuous mode [ 117.739085][ T5234] Bluetooth: hci4: command tx timeout [ 117.769558][ T5227] veth1_macvtap: entered promiscuous mode [ 117.815151][ T5234] Bluetooth: hci3: command tx timeout [ 117.842858][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.900838][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.916162][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.929612][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.951056][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.997906][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.009206][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.027534][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.037051][ T5224] veth0_vlan: entered promiscuous mode [ 118.052599][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.065333][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.076163][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.086842][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.122157][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.133701][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.142977][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.154554][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.210865][ T5224] veth1_vlan: entered promiscuous mode [ 118.362876][ T5220] veth0_vlan: entered promiscuous mode [ 118.408257][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.486407][ T5220] veth1_vlan: entered promiscuous mode [ 118.498779][ T5224] veth0_macvtap: entered promiscuous mode [ 118.533392][ T5224] veth1_macvtap: entered promiscuous mode [ 118.559310][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.569521][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.678542][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.687191][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.701608][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.712759][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.722733][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.733766][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.746580][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.759536][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.773051][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.784917][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.797990][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.810719][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.866378][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.883992][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.892768][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.902059][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.017944][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.019041][ T5220] veth0_macvtap: entered promiscuous mode [ 119.031711][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.040710][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.048196][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.129572][ T5220] veth1_macvtap: entered promiscuous mode [ 119.135861][ T29] audit: type=1400 audit(1723604615.317:114): avc: denied { mounton } for pid=5221 comm="syz-executor" path="/root/syzkaller.s0s29T/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 119.194222][ T29] audit: type=1400 audit(1723604615.317:115): avc: denied { mount } for pid=5221 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.229786][ T29] audit: type=1400 audit(1723604615.317:116): avc: denied { mounton } for pid=5221 comm="syz-executor" path="/root/syzkaller.s0s29T/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.240682][ T5225] veth0_vlan: entered promiscuous mode [ 119.270721][ T29] audit: type=1400 audit(1723604615.327:117): avc: denied { mount } for pid=5221 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.300593][ T29] audit: type=1400 audit(1723604615.347:118): avc: denied { unmount } for pid=5221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.379630][ T5225] veth1_vlan: entered promiscuous mode [ 119.392129][ T29] audit: type=1400 audit(1723604615.357:119): avc: denied { mounton } for pid=5221 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 119.416307][ T29] audit: type=1400 audit(1723604615.377:120): avc: denied { mount } for pid=5221 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.451224][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.462815][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.472816][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.485927][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.497417][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.508007][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.520170][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.581262][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.600676][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.612737][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.623635][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.636920][ T29] audit: type=1400 audit(1723604615.827:121): avc: denied { read write } for pid=5221 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.648739][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.714227][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.724544][ T29] audit: type=1400 audit(1723604615.847:122): avc: denied { open } for pid=5227 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.757325][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.790468][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.803012][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.916477][ T5220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.925879][ T5220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.945596][ T5220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.958450][ T5220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.196947][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.244007][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.327732][ T5225] veth0_macvtap: entered promiscuous mode [ 120.350237][ T5225] veth1_macvtap: entered promiscuous mode [ 120.998970][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.084151][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.130945][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.142423][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.152502][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.163027][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.173139][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.183673][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.203391][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.251823][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 121.251845][ T29] audit: type=1400 audit(1723604617.427:137): avc: denied { map_create } for pid=5319 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.285533][ T5318] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6'. [ 121.290644][ T29] audit: type=1400 audit(1723604617.437:138): avc: denied { map_read map_write } for pid=5319 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.322417][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 121.384357][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 121.409912][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.447519][ T29] audit: type=1400 audit(1723604617.637:139): avc: denied { map } for pid=5319 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.468196][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.471261][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.486134][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.508991][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.580558][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.604471][ T5322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.619992][ T29] audit: type=1400 audit(1723604617.647:140): avc: denied { read write } for pid=5319 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.646296][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.681250][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.712799][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.722885][ T29] audit: type=1400 audit(1723604617.687:141): avc: denied { create } for pid=5319 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.782509][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.827169][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.841974][ T29] audit: type=1400 audit(1723604617.947:142): avc: denied { read } for pid=5321 comm="syz.2.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.873150][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.894791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 121.997561][ T29] audit: type=1400 audit(1723604617.947:143): avc: denied { open } for pid=5321 comm="syz.2.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.020785][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.040970][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.082333][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.100427][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.109843][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.154987][ T29] audit: type=1400 audit(1723604618.077:144): avc: denied { create } for pid=5319 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.241761][ T29] audit: type=1400 audit(1723604618.117:145): avc: denied { setopt } for pid=5319 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.335948][ T29] audit: type=1400 audit(1723604618.137:146): avc: denied { map } for pid=5319 comm="syz.0.7" path="socket:[6456]" dev="sockfs" ino=6456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.494862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.533094][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.594089][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.669010][ T5335] Cannot find map_set index 0 as target [ 122.853530][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.882506][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.918353][ T5337] team_slave_1: mtu greater than device maximum [ 122.954218][ T5337] team0: Device team_slave_1 failed to change mtu [ 123.173410][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.231610][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.274170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 123.286015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.706457][ T5345] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.862297][ T5345] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 123.953591][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.092733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.296987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.306286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.604274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 124.612646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 124.621884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.122687][ T5355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13'. [ 126.294935][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 126.294958][ T29] audit: type=1400 audit(1723604622.487:167): avc: denied { ioctl } for pid=5356 comm="syz.3.14" path="socket:[7760]" dev="sockfs" ino=7760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.503656][ T29] audit: type=1400 audit(1723604622.587:168): avc: denied { name_bind } for pid=5358 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.541638][ T5340] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.645008][ T29] audit: type=1400 audit(1723604622.597:169): avc: denied { node_bind } for pid=5358 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 126.664211][ T5234] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 126.913900][ T29] audit: type=1400 audit(1723604623.077:170): avc: denied { create } for pid=5362 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.050305][ T29] audit: type=1400 audit(1723604623.127:171): avc: denied { setopt } for pid=5362 comm="syz.4.15" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.204129][ T29] audit: type=1400 audit(1723604623.157:172): avc: denied { read write } for pid=5362 comm="syz.4.15" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.290074][ T29] audit: type=1400 audit(1723604623.157:173): avc: denied { open } for pid=5362 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.325678][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.347919][ T5292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.413899][ T29] audit: type=1400 audit(1723604623.167:174): avc: denied { create } for pid=5364 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 127.492629][ T29] audit: type=1400 audit(1723604623.167:175): avc: denied { ioctl } for pid=5362 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.544768][ T29] audit: type=1400 audit(1723604623.207:176): avc: denied { write } for pid=5364 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 127.564034][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 127.600962][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 127.601110][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 127.650615][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.674654][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.705375][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.723687][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.740838][ T8] usb 2-1: Product: syz [ 127.740871][ T8] usb 2-1: Manufacturer: syz [ 127.740898][ T8] usb 2-1: SerialNumber: syz [ 127.804310][ T5292] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.844247][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.895973][ T5380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.901533][ T5292] usb 5-1: config 0 descriptor?? [ 127.925698][ T5363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.135489][ T5234] Bluetooth: hci4: unexpected event 0x30 length: 32 > 3 [ 128.183179][ T8] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 128.442342][ T8] usb 2-1: USB disconnect, device number 2 [ 128.473740][ T5292] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 128.669906][ T5312] udevd[5312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.710133][ T5292] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.789506][ T5234] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 128.842410][ T5292] usb 5-1: USB disconnect, device number 2 [ 129.844322][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 129.909354][ T5399] bridge_slave_1: left allmulticast mode [ 130.834684][ T5399] bridge_slave_1: left promiscuous mode [ 130.841493][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.073397][ T5399] bridge_slave_0: left allmulticast mode [ 131.116971][ T5399] bridge_slave_0: left promiscuous mode [ 131.186809][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.419244][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 131.708639][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 131.708662][ T29] audit: type=1400 audit(1723604627.897:186): avc: denied { create } for pid=5417 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.802419][ T29] audit: type=1400 audit(1723604627.927:187): avc: denied { write } for pid=5417 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.889180][ T29] audit: type=1400 audit(1723604627.977:188): avc: denied { getopt } for pid=5419 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.538967][ T29] audit: type=1400 audit(1723604627.977:189): avc: denied { name_connect } for pid=5419 comm="syz.3.37" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 132.876774][ T29] audit: type=1400 audit(1723604628.367:190): avc: denied { setopt } for pid=5420 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.974701][ T29] audit: type=1400 audit(1723604628.377:191): avc: denied { map } for pid=5420 comm="syz.1.39" path="socket:[6715]" dev="sockfs" ino=6715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.107036][ T29] audit: type=1400 audit(1723604628.377:192): avc: denied { read } for pid=5420 comm="syz.1.39" path="socket:[6715]" dev="sockfs" ino=6715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.184029][ T29] audit: type=1400 audit(1723604629.157:193): avc: denied { read } for pid=5432 comm="syz.0.44" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 133.505176][ T29] audit: type=1400 audit(1723604629.157:194): avc: denied { open } for pid=5432 comm="syz.0.44" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 133.524222][ T29] audit: type=1400 audit(1723604629.707:195): avc: denied { read } for pid=5438 comm="syz.3.45" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.994188][ T5444] tty tty27: ldisc open failed (-12), clearing slot 26 [ 135.002372][ T5445] tty tty1: ldisc open failed (-12), clearing slot 0 [ 136.044527][ T5470] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 136.133466][ T5470] batman_adv: batadv0: Adding interface: team0 [ 136.245035][ T5470] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.271000][ T5470] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 136.342682][ T5470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 136.844374][ T5473] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 136.882652][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 136.882676][ T29] audit: type=1400 audit(1723604633.057:210): avc: denied { getopt } for pid=5468 comm="syz.1.52" laddr=::ffff:172.20.20.170 lport=58 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.921235][ T5473] netlink: 2 bytes leftover after parsing attributes in process `syz.3.51'. [ 137.094446][ T5473] team0: entered promiscuous mode [ 137.107783][ T5473] team_slave_0: entered promiscuous mode [ 137.157928][ T5473] team_slave_1: entered promiscuous mode [ 137.175551][ T5473] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.206752][ T5473] batman_adv: batadv0: Interface activated: team0 [ 137.226182][ T5473] batman_adv: batadv0: Interface deactivated: team0 [ 137.232926][ T5473] batman_adv: batadv0: Removing interface: team0 [ 137.275364][ T5473] bridge0: port 3(team0) entered blocking state [ 137.300504][ T5473] bridge0: port 3(team0) entered disabled state [ 137.326178][ T5473] team0: entered allmulticast mode [ 137.345471][ T5473] team_slave_0: entered allmulticast mode [ 137.351270][ T5473] team_slave_1: entered allmulticast mode [ 137.383302][ T5473] bridge0: port 3(team0) entered blocking state [ 137.390369][ T5473] bridge0: port 3(team0) entered forwarding state [ 137.473802][ T29] audit: type=1400 audit(1723604633.657:211): avc: denied { create } for pid=5477 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.658998][ T29] audit: type=1400 audit(1723604633.837:212): avc: denied { execute } for pid=5481 comm="syz.2.54" path="/8/cpu.stat" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.800578][ T29] audit: type=1400 audit(1723604633.887:213): avc: denied { write } for pid=5477 comm="syz.4.53" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.884250][ T29] audit: type=1400 audit(1723604633.907:214): avc: denied { cmd } for pid=5481 comm="syz.2.54" path="socket:[7954]" dev="sockfs" ino=7954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.007699][ T5487] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.045743][ T29] audit: type=1400 audit(1723604634.137:215): avc: denied { unlink } for pid=5484 comm="syz.3.56" name="#1" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.154120][ T29] audit: type=1400 audit(1723604634.277:216): avc: denied { mount } for pid=5484 comm="syz.3.56" name="/" dev="overlay" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.400357][ T29] audit: type=1400 audit(1723604634.587:217): avc: denied { read } for pid=5488 comm="syz.2.57" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.492059][ T29] audit: type=1400 audit(1723604634.617:218): avc: denied { open } for pid=5488 comm="syz.2.57" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.667023][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.683731][ T29] audit: type=1400 audit(1723604634.827:219): avc: denied { create } for pid=5494 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.703439][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.484069][ T944] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.600365][ T5501] netlink: 'syz.3.60': attribute type 4 has an invalid length. [ 139.830132][ T944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.884470][ T944] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 139.971265][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.030349][ T944] usb 1-1: config 0 descriptor?? [ 140.064191][ T944] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 140.132617][ T944] command write [95] error -22 [ 140.193123][ T5510] netlink: 8 bytes leftover after parsing attributes in process `Ë:'. [ 140.570699][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.727766][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.768263][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.821667][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.879828][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.914973][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.933329][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.967553][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.003313][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.173077][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.284210][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.322231][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.334027][ T8] usb 4-1: config 0 has no interfaces? [ 141.339660][ T8] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 141.421422][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.431903][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.442328][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.458000][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.476800][ T8] usb 4-1: config 0 descriptor?? [ 141.494136][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.542251][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.639008][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.697326][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.768628][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.844035][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.860018][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.879943][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.899691][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.928792][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.947933][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.963741][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 141.987572][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.019245][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.041580][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.126495][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.151962][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.200535][ T944] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.332890][ T944] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 142.390883][ T5522] evm: overlay not supported [ 142.767968][ T5374] usb 4-1: USB disconnect, device number 2 [ 143.549236][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 143.549260][ T29] audit: type=1400 audit(1723604639.667:227): avc: denied { getopt } for pid=5523 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.174557][ T29] audit: type=1400 audit(1723604639.667:228): avc: denied { ioctl } for pid=5523 comm="syz.3.66" path="/dev/video8" dev="devtmpfs" ino=870 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.205901][ T29] audit: type=1400 audit(1723604639.687:229): avc: denied { sqpoll } for pid=5523 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.363242][ T5277] usb 1-1: USB disconnect, device number 2 [ 144.488071][ T29] audit: type=1400 audit(1723604640.677:230): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 144.740887][ T29] audit: type=1400 audit(1723604640.927:231): avc: denied { create } for pid=5528 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 144.760133][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.114196][ T29] audit: type=1400 audit(1723604641.257:232): avc: denied { connect } for pid=5532 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.264349][ T29] audit: type=1400 audit(1723604641.257:233): avc: denied { write } for pid=5532 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.379903][ T29] audit: type=1400 audit(1723604641.337:234): avc: denied { read } for pid=5532 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.664161][ T944] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 146.886810][ T944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 146.963763][ T944] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.052893][ T944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.103527][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.201449][ T944] usb 5-1: SerialNumber: syz [ 147.284512][ T5542] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.660663][ T5542] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.315731][ T944] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 148.447129][ T944] usb 5-1: USB disconnect, device number 3 [ 148.498987][ T944] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 149.574661][ T29] audit: type=1400 audit(1723604645.117:235): avc: denied { bind } for pid=5553 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.414151][ T29] audit: type=1400 audit(1723604646.597:236): avc: denied { bind } for pid=5561 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.536810][ T29] audit: type=1400 audit(1723604646.607:237): avc: denied { listen } for pid=5561 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.632920][ T29] audit: type=1400 audit(1723604646.627:238): avc: denied { connect } for pid=5561 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.913730][ T29] audit: type=1400 audit(1723604646.637:239): avc: denied { write } for pid=5561 comm="syz.3.77" path="socket:[7015]" dev="sockfs" ino=7015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.939861][ T29] audit: type=1400 audit(1723604646.647:240): avc: denied { accept } for pid=5561 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.710818][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.878086][ T29] audit: type=1400 audit(1723604646.657:241): avc: denied { read } for pid=5561 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.021391][ T5570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 152.137399][ T25] usb 4-1: config index 0 descriptor too short (expected 11076, got 36) [ 152.148423][ T25] usb 4-1: config 74 has too many interfaces: 179, using maximum allowed: 32 [ 152.224403][ T25] usb 4-1: config 74 has 1 interface, different from the descriptor's value: 179 [ 152.298460][ T25] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.348019][ T25] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.349502][ T29] audit: type=1400 audit(1723604648.537:242): avc: denied { bind } for pid=5559 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.416464][ T25] usb 4-1: config 74 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.430068][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.449643][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.478221][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 152.478556][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.507855][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.516425][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.524214][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.552303][ T29] audit: type=1400 audit(1723604648.737:243): avc: denied { mounton } for pid=5572 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.603275][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.224329][ T25] usbhid 4-1:74.0: can't add hid device: -71 [ 154.230529][ T25] usbhid 4-1:74.0: probe with driver usbhid failed with error -71 [ 154.350703][ T25] usb 4-1: USB disconnect, device number 3 [ 154.447018][ T29] audit: type=1400 audit(1723604650.637:244): avc: denied { bind } for pid=5582 comm="syz.1.82" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.617109][ T5234] Bluetooth: hci5: command tx timeout [ 154.726754][ T29] audit: type=1400 audit(1723604650.637:245): avc: denied { node_bind } for pid=5582 comm="syz.1.82" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 154.876077][ T29] audit: type=1326 audit(1723604651.057:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.3.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f6d799f9 code=0x0 [ 155.740837][ T5600] netlink: 'syz.4.86': attribute type 11 has an invalid length. [ 155.748626][ T5600] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.86'. [ 155.771117][ T5600] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 156.639163][ T29] audit: type=1400 audit(1723604652.607:247): avc: denied { write } for pid=5586 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 156.706147][ T5234] Bluetooth: hci5: command tx timeout [ 156.805731][ T5605] sp0: Synchronizing with TNC [ 156.885562][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 156.911371][ T29] audit: type=1400 audit(1723604653.097:248): avc: denied { search } for pid=4883 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.032197][ T5604] [U] è` [ 157.055828][ T29] audit: type=1400 audit(1723604653.147:249): avc: denied { read } for pid=4883 comm="dhcpcd" name="n70" dev="tmpfs" ino=1855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.283439][ T29] audit: type=1400 audit(1723604653.147:250): avc: denied { open } for pid=4883 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=1855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.334072][ T29] audit: type=1400 audit(1723604653.147:251): avc: denied { getattr } for pid=4883 comm="dhcpcd" path="/run/udev/data/n70" dev="tmpfs" ino=1855 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.866263][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.916671][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.954556][ T5572] bridge_slave_0: entered allmulticast mode [ 157.997658][ T5572] bridge_slave_0: entered promiscuous mode [ 158.987650][ T5234] Bluetooth: hci5: command tx timeout [ 159.956419][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.024338][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.074280][ T5572] bridge_slave_1: entered allmulticast mode [ 160.115751][ T5572] bridge_slave_1: entered promiscuous mode [ 160.162989][ T29] audit: type=1400 audit(1723604656.347:252): avc: denied { execute } for pid=5623 comm="syz.0.90" path="/17/bus" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.485458][ T5627] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.609423][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.725994][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.014704][ T5234] Bluetooth: hci5: command tx timeout [ 162.064204][ T29] audit: type=1400 audit(1723604658.237:253): avc: denied { write } for pid=5621 comm="syz.1.91" path="socket:[7126]" dev="sockfs" ino=7126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.064765][ T5626] Bluetooth: MGMT ver 1.23 [ 162.237609][ T29] audit: type=1400 audit(1723604658.337:254): avc: denied { name_bind } for pid=5621 comm="syz.1.91" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 162.336024][ T5572] team0: Port device team_slave_0 added [ 162.378279][ T5572] team0: Port device team_slave_1 added [ 162.496717][ T29] audit: type=1400 audit(1723604658.687:255): avc: denied { setopt } for pid=5635 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.531777][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.550676][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.554146][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.611014][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.759690][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.785680][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.804047][ T29] audit: type=1400 audit(1723604658.977:256): avc: denied { create } for pid=5635 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 162.911135][ T29] audit: type=1400 audit(1723604659.067:257): avc: denied { setopt } for pid=5639 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.931298][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.978932][ T29] audit: type=1400 audit(1723604659.067:258): avc: denied { read } for pid=5639 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.013838][ T29] audit: type=1400 audit(1723604659.167:259): avc: denied { bind } for pid=5635 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.016371][ T8] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.190352][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.236754][ T8] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.262708][ T8] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.281314][ T8] usb 1-1: Manufacturer: syz [ 163.332997][ T8] usb 1-1: config 0 descriptor?? [ 163.452183][ T5572] hsr_slave_0: entered promiscuous mode [ 163.494995][ T5572] hsr_slave_1: entered promiscuous mode [ 163.536937][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.544858][ T5572] Cannot create hsr debugfs directory [ 163.654283][ T29] audit: type=1400 audit(1723604659.837:260): avc: denied { write } for pid=5647 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.706164][ T8] rc_core: IR keymap rc-hauppauge not found [ 163.712218][ T8] Registered IR keymap rc-empty [ 163.784567][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.805064][ T5651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.810876][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 163.848100][ T5651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.887367][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 163.949313][ T5650] tipc: Enabling of bearer rejected, failed to enable media [ 163.976229][ T29] audit: type=1400 audit(1723604660.167:261): avc: denied { read } for pid=4654 comm="acpid" name="event4" dev="devtmpfs" ino=2365 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.011143][ T25] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 164.077901][ T25] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.169655][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 164.215420][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.569913][ T5279] usb 1-1: USB disconnect, device number 3 [ 166.007349][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 166.007374][ T29] audit: type=1400 audit(1723604662.187:265): avc: denied { write } for pid=5643 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.060402][ T5572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.155822][ T25] usb 2-1: string descriptor 0 read error: -71 [ 166.204376][ T29] audit: type=1400 audit(1723604662.187:266): avc: denied { nlmsg_read } for pid=5643 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.523620][ T25] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 166.647421][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 170.156086][ T25] usb 2-1: USB disconnect, device number 3 [ 170.184246][ T29] audit: type=1400 audit(1723604662.877:267): avc: denied { accept } for pid=5661 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.194264][ T5234] Bluetooth: hci4: link tx timeout [ 170.214025][ T5234] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.510210][ T5572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.038164][ T5572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.301062][ T5572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.316032][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 172.612206][ T29] audit: type=1400 audit(1723604897.624:268): avc: denied { read write } for pid=5679 comm="syz.0.107" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.992521][ T29] audit: type=1400 audit(1723604897.624:269): avc: denied { open } for pid=5679 comm="syz.0.107" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.425675][ T29] audit: type=1400 audit(1723604898.354:270): avc: denied { connect } for pid=5682 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.941718][ T29] audit: type=1400 audit(1723604898.384:271): avc: denied { write } for pid=5682 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.962785][ T29] audit: type=1400 audit(1723604899.174:272): avc: denied { create } for pid=5682 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.983258][ T29] audit: type=1400 audit(1723604899.544:273): avc: denied { ioctl } for pid=5682 comm="syz.3.109" path="socket:[8305]" dev="sockfs" ino=8305 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.034009][ T29] audit: type=1400 audit(1723604900.074:274): avc: denied { listen } for pid=5679 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.334225][ T29] audit: type=1400 audit(1723604900.514:275): avc: denied { create } for pid=5690 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.366870][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.387056][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.408272][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.419768][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.444912][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 175.455610][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.527643][ T5572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.559572][ T5572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.607637][ T5572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.615966][ T29] audit: type=1400 audit(1723604900.784:276): avc: denied { connect } for pid=5690 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.642019][ T5572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.794381][ T5234] Bluetooth: hci6: command tx timeout [ 178.119206][ T5703] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 179.814323][ T5234] Bluetooth: hci6: command tx timeout [ 181.898434][ T5234] Bluetooth: hci6: command tx timeout [ 183.978170][ T5234] Bluetooth: hci6: command tx timeout [ 184.659700][ T29] audit: type=1400 audit(1723604909.774:277): avc: denied { read } for pid=5717 comm="syz.3.117" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.465848][ T29] audit: type=1400 audit(1723604909.774:278): avc: denied { open } for pid=5717 comm="syz.3.117" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.606942][ T29] audit: type=1400 audit(1723604909.784:279): avc: denied { ioctl } for pid=5717 comm="syz.3.117" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.702761][ T29] audit: type=1400 audit(1723604910.564:280): avc: denied { ioctl } for pid=5711 comm="syz.1.116" path="/dev/input/event0" dev="devtmpfs" ino=835 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.783774][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.884792][ T29] audit: type=1400 audit(1723604911.304:281): avc: denied { connect } for pid=5723 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 187.256444][ T29] audit: type=1400 audit(1723604912.424:282): avc: denied { read } for pid=5727 comm="syz.3.119" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.327089][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.394927][ T29] audit: type=1400 audit(1723604912.424:283): avc: denied { open } for pid=5727 comm="syz.3.119" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.420737][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.428187][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.582607][ T29] audit: type=1400 audit(1723604912.514:284): avc: denied { ioctl } for pid=5727 comm="syz.3.119" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.652248][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.659605][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.782403][ T5691] chnl_net:caif_netlink_parms(): no params data found [ 189.164872][ T5740] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.179348][ T5740] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 189.915765][ T29] audit: type=1400 audit(1723604914.344:285): avc: denied { create } for pid=5736 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.207352][ T29] audit: type=1400 audit(1723604915.394:286): avc: denied { sys_module } for pid=5572 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 191.218211][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.272580][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.330318][ T5691] bridge_slave_0: entered allmulticast mode [ 191.351855][ T5691] bridge_slave_0: entered promiscuous mode [ 191.380755][ T29] audit: type=1400 audit(1723604916.564:287): avc: denied { create } for pid=5751 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 191.448222][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.493503][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.524415][ T5691] bridge_slave_1: entered allmulticast mode [ 191.531413][ T29] audit: type=1400 audit(1723604916.664:288): avc: denied { ioctl } for pid=5751 comm="syz.1.124" path="socket:[9584]" dev="sockfs" ino=9584 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 191.611548][ T5691] bridge_slave_1: entered promiscuous mode [ 191.946803][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.125'. [ 191.954162][ T29] audit: type=1400 audit(1723604917.134:289): avc: denied { nlmsg_write } for pid=5757 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.045135][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.116573][ T5766] capability: warning: `syz.3.127' uses deprecated v2 capabilities in a way that may be insecure [ 192.129827][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.231491][ T5767] tipc: Started in network mode [ 192.260213][ T5767] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 192.314216][ T5767] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.388076][ T5767] tipc: Enabled bearer , priority 10 [ 192.579301][ T29] audit: type=1400 audit(1723604917.764:290): avc: denied { block_suspend } for pid=5770 comm="syz.0.129" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.775910][ T5691] team0: Port device team_slave_0 added [ 192.851023][ T5691] team0: Port device team_slave_1 added [ 194.087675][ T5307] tipc: Node number set to 1 [ 194.197981][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.304051][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.364290][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.445800][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.508083][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.564409][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.603977][ T29] audit: type=1400 audit(1723604919.784:291): avc: denied { getopt } for pid=5784 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.623987][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.918810][ T29] audit: type=1400 audit(1723604920.104:292): avc: denied { write } for pid=5789 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.128725][ T29] audit: type=1400 audit(1723604920.314:293): avc: denied { create } for pid=5791 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.196245][ T5691] hsr_slave_0: entered promiscuous mode [ 195.226087][ T29] audit: type=1400 audit(1723604920.314:294): avc: denied { setopt } for pid=5791 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.266112][ T5691] hsr_slave_1: entered promiscuous mode [ 195.298030][ T5691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.315987][ T5691] Cannot create hsr debugfs directory [ 197.649103][ T29] audit: type=1400 audit(1723604920.874:295): avc: denied { bind } for pid=5795 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.153991][ T29] audit: type=1400 audit(1723604920.874:296): avc: denied { name_bind } for pid=5795 comm="syz.0.137" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 198.319409][ T29] audit: type=1400 audit(1723604920.874:297): avc: denied { node_bind } for pid=5795 comm="syz.0.137" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 198.704832][ T5805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 198.711934][ T5805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.784895][ T5805] vhci_hcd vhci_hcd.0: Device attached [ 198.996965][ T5806] vhci_hcd: connection closed [ 199.026460][ T1055] vhci_hcd: stop threads [ 199.057366][ T5374] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 199.098926][ T1055] vhci_hcd: release socket [ 199.120118][ T1055] vhci_hcd: disconnect device [ 199.122348][ T5374] usb 15-1: enqueue for inactive port 0 [ 199.204120][ T5374] vhci_hcd: vhci_device speed not set [ 199.338609][ T5572] veth0_vlan: entered promiscuous mode [ 199.523643][ T5691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.635197][ T5572] veth1_vlan: entered promiscuous mode [ 200.070558][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.078912][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.625315][ T5691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.157889][ T5691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.305263][ T5572] veth0_macvtap: entered promiscuous mode [ 201.365912][ T29] audit: type=1400 audit(1723604926.534:298): avc: denied { create } for pid=5825 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 201.558003][ T5691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.661207][ T5572] veth1_macvtap: entered promiscuous mode [ 201.676208][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 202.230629][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.298447][ T5843] syz.0.148[5843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.298712][ T5843] syz.0.148[5843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.285392][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.421531][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.446050][ T29] audit: type=1400 audit(1723604928.604:299): avc: denied { watch watch_reads } for pid=5834 comm="syz.3.147" path="/proc/136" dev="proc" ino=9804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 203.510512][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.520786][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.531871][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.542177][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.553267][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.587532][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.630641][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.691009][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.820808][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.934356][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.993736][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.043972][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.113244][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.140669][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.186384][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.235238][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.257513][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.279772][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.379835][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.514364][ T29] audit: type=1400 audit(1723604929.694:300): avc: denied { write } for pid=5849 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.589168][ T5572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.664871][ T5572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.698571][ T5572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.734344][ T5572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.067710][ T5691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.131822][ T5691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.322199][ T5691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.439503][ T5691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.260581][ T5234] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 206.407684][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.490116][ T29] audit: type=1400 audit(1723604931.674:301): avc: denied { read write } for pid=5860 comm="syz.1.154" name="vmci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.519581][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.537773][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.661366][ T29] audit: type=1400 audit(1723604931.674:302): avc: denied { open } for pid=5860 comm="syz.1.154" path="/dev/vmci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.792833][ T5234] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 206.811819][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.825033][ T29] audit: type=1400 audit(1723604931.744:303): avc: denied { ioctl } for pid=5860 comm="syz.1.154" path="/dev/vmci" dev="devtmpfs" ino=683 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.912789][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.953658][ T29] audit: type=1400 audit(1723604932.134:304): avc: denied { mount } for pid=5572 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.025432][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.082719][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.089983][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.191230][ T29] audit: type=1400 audit(1723604932.364:305): avc: denied { setopt } for pid=5866 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.257558][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.264772][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.463066][ T29] audit: type=1400 audit(1723604932.644:306): avc: denied { bind } for pid=5866 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.585106][ T29] audit: type=1400 audit(1723604932.674:307): avc: denied { create } for pid=5870 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 207.674178][ T29] audit: type=1400 audit(1723604932.704:308): avc: denied { ioctl } for pid=5870 comm="syz.1.157" path="socket:[9101]" dev="sockfs" ino=9101 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 207.844266][ T5872] netem: incorrect ge model size [ 207.937357][ T5872] netem: change failed [ 208.186349][ T29] audit: type=1400 audit(1723604933.224:309): avc: denied { read } for pid=5875 comm="syz.1.158" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.233820][ T29] audit: type=1400 audit(1723604933.224:310): avc: denied { open } for pid=5875 comm="syz.1.158" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.785023][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.967893][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 218.586244][ T5919] overlay: Unknown parameter 'mask' [ 219.717007][ T5691] veth0_vlan: entered promiscuous mode [ 219.878632][ T5691] veth1_vlan: entered promiscuous mode [ 220.192930][ T5691] veth0_macvtap: entered promiscuous mode [ 220.215184][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 220.215204][ T29] audit: type=1400 audit(1723604945.374:319): avc: denied { read } for pid=5904 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.267248][ T5691] veth1_macvtap: entered promiscuous mode [ 220.390282][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.411333][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.425177][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.446365][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.462619][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.482454][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.493682][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.502867][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.530549][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.550896][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.566072][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.676595][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.734224][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.774287][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.818608][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.932168][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.981208][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.023468][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.057335][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.268354][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.331165][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.375758][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.403957][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.435746][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.466515][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.498580][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.559359][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.573532][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.588406][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.598334][ T5691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.611211][ T5691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.672589][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.754868][ T5691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.794004][ T5691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.803004][ T5691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.816781][ T5691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.109003][ T29] audit: type=1400 audit(1723604947.294:320): avc: denied { write } for pid=5933 comm="syz.0.169" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 222.615329][ T5232] Bluetooth: hci7: command tx timeout [ 224.053459][ T1055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.531095][ T1055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.694400][ T5232] Bluetooth: hci7: command tx timeout [ 231.973974][ T5232] Bluetooth: hci7: command tx timeout [ 232.259500][ T1055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.663763][ T1055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.115341][ T29] audit: type=1400 audit(1723604958.294:321): avc: denied { read } for pid=5958 comm="syz.3.176" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 233.552801][ T29] audit: type=1400 audit(1723604958.294:322): avc: denied { open } for pid=5958 comm="syz.3.176" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 234.109904][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 234.119936][ T5237] Bluetooth: hci7: command tx timeout [ 234.133470][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 234.142518][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 234.149972][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 234.679282][ T29] audit: type=1400 audit(1723604959.844:323): avc: denied { ioctl } for pid=5958 comm="syz.3.176" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 235.343756][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.455012][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.483011][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.497353][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.522047][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.534377][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.060875][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 236.549071][ T1055] bridge_slave_1: left allmulticast mode [ 236.584183][ T1055] bridge_slave_1: left promiscuous mode [ 236.612722][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.746222][ T1055] bridge_slave_0: left allmulticast mode [ 236.757541][ T1055] bridge_slave_0: left promiscuous mode [ 236.784567][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.036663][ T29] audit: type=1400 audit(1723604962.204:324): avc: denied { watch watch_reads } for pid=5981 comm="syz.1.183" path="/51" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.656636][ T5234] Bluetooth: hci5: command tx timeout [ 237.868426][ T29] audit: type=1400 audit(1723604963.054:325): avc: denied { create } for pid=5987 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.792506][ T5996] /dev/nullb0: Can't open blockdev [ 239.825850][ T5234] Bluetooth: hci5: command tx timeout [ 240.428921][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.584718][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.884081][ T1055] bond0 (unregistering): Released all slaves [ 241.865114][ T29] audit: type=1400 audit(1723604966.194:326): avc: denied { watch } for pid=6005 comm="syz.1.188" path="/55" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 241.920647][ T5234] Bluetooth: hci5: command tx timeout [ 242.035855][ T29] audit: type=1400 audit(1723604966.194:327): avc: denied { watch_sb } for pid=6005 comm="syz.1.188" path="/55" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.804350][ T5277] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 243.865282][ T29] audit: type=1400 audit(1723604969.054:328): avc: denied { search } for pid=4651 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.974596][ T5234] Bluetooth: hci5: command tx timeout [ 244.036855][ T5277] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 244.054078][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.078054][ T29] audit: type=1400 audit(1723604969.254:329): avc: denied { write } for pid=6020 comm="syz.3.192" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.127788][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.242740][ T5277] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 244.262483][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.282082][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.293238][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.317855][ T29] audit: type=1400 audit(1723604969.504:330): avc: denied { read } for pid=6027 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.344244][ T5926] bridge_slave_0: entered allmulticast mode [ 244.350130][ T5277] usb 1-1: config 0 descriptor?? [ 244.399652][ T5926] bridge_slave_0: entered promiscuous mode [ 244.446118][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.462178][ T29] audit: type=1400 audit(1723604969.534:331): avc: denied { open } for pid=6027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.484200][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.554326][ T5926] bridge_slave_1: entered allmulticast mode [ 244.567966][ T5234] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 244.593676][ T5926] bridge_slave_1: entered promiscuous mode [ 244.604117][ T29] audit: type=1400 audit(1723604969.534:332): avc: denied { getattr } for pid=6027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.813916][ T29] audit: type=1400 audit(1723604969.934:333): avc: denied { ioctl } for pid=6029 comm="syz.3.194" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 245.067001][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.870088][ T29] audit: type=1400 audit(1723604970.164:334): avc: denied { read } for pid=6017 comm="syz.0.191" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.008737][ T29] audit: type=1400 audit(1723604970.174:335): avc: denied { open } for pid=6017 comm="syz.0.191" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.614055][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 248.436063][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.740559][ T5277] usbhid 1-1:0.0: can't add hid device: -71 [ 248.752243][ T5277] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 248.803589][ T5277] usb 1-1: USB disconnect, device number 4 [ 249.031932][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 249.031953][ T29] audit: type=1400 audit(1723604974.214:337): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.226704][ T29] audit: type=1400 audit(1723604974.254:338): avc: denied { add_name } for pid=6025 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.339936][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.463792][ T29] audit: type=1400 audit(1723604974.254:339): avc: denied { create } for pid=6025 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.667803][ T29] audit: type=1400 audit(1723604974.274:340): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.722389][ T29] audit: type=1400 audit(1723604974.274:341): avc: denied { append } for pid=6025 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.416114][ T1055] hsr_slave_0: left promiscuous mode [ 250.469872][ T29] audit: type=1400 audit(1723604975.654:342): avc: denied { remove_name } for pid=6066 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.544371][ T1055] hsr_slave_1: left promiscuous mode [ 250.584064][ T29] audit: type=1400 audit(1723604975.694:343): avc: denied { unlink } for pid=6066 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2244 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.617143][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.649764][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.679331][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.722416][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.734326][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.914362][ T1055] veth1_macvtap: left promiscuous mode [ 250.934307][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 250.944241][ T1055] veth0_macvtap: left promiscuous mode [ 250.950270][ T1055] veth1_vlan: left promiscuous mode [ 250.986988][ T1055] veth0_vlan: left promiscuous mode [ 250.993297][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 251.020285][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.053941][ T8] usb 4-1: Product: syz [ 251.061417][ T8] usb 4-1: Manufacturer: syz [ 251.094163][ T8] usb 4-1: SerialNumber: syz [ 251.137465][ T8] usb 4-1: config 0 descriptor?? [ 251.254897][ T8] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 251.549419][ T8] pwc: Failed to set LED on/off time (-71) [ 251.578137][ T8] pwc: send_video_command error -71 [ 251.634383][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 251.668824][ T8] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 251.717595][ T8] usb 4-1: USB disconnect, device number 4 [ 253.823558][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 253.946116][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 255.275931][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.456531][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 255.744369][ T6090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 255.750929][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 255.819542][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 255.909523][ T6091] vhci_hcd: connection closed [ 255.910524][ T5900] vhci_hcd: stop threads [ 255.919827][ T5900] vhci_hcd: release socket [ 255.957644][ T5900] vhci_hcd: disconnect device [ 256.034062][ T5292] vhci_hcd: vhci_device speed not set [ 256.100562][ T6095] Zero length message leads to an empty skb [ 256.106945][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 256.194022][ T29] audit: type=1400 audit(1723604981.374:344): avc: denied { write } for pid=4651 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.264306][ T29] audit: type=1400 audit(1723604981.374:345): avc: denied { remove_name } for pid=4651 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.300363][ T5926] team0: Port device team_slave_0 added [ 256.340358][ T5926] team0: Port device team_slave_1 added [ 256.354276][ T29] audit: type=1400 audit(1723604981.374:346): avc: denied { rename } for pid=4651 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.390267][ T29] audit: type=1400 audit(1723604981.374:347): avc: denied { add_name } for pid=4651 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.480597][ T29] audit: type=1400 audit(1723604981.374:348): avc: denied { unlink } for pid=4651 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.637862][ T29] audit: type=1400 audit(1723604981.404:349): avc: denied { create } for pid=4651 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.924306][ T29] audit: type=1400 audit(1723604982.104:350): avc: denied { map } for pid=6102 comm="syz.3.212" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 257.132518][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.214800][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.664054][ T29] audit: type=1804 audit(1723604982.464:351): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.211" name="/newroot/49/bus/bus" dev="overlay" ino=303 res=1 errno=0 [ 257.694153][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.718437][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.738813][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.878351][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.560354][ T29] audit: type=1400 audit(1723604983.744:352): avc: denied { ioctl } for pid=6118 comm="syz.0.215" path="socket:[11590]" dev="sockfs" ino=11590 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.287495][ T29] audit: type=1400 audit(1723604984.464:353): avc: denied { read } for pid=6118 comm="syz.0.215" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.536501][ T6115] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 259.679956][ T6115] bridge0: port 3(team0) entered disabled state [ 259.724845][ T6115] team0: left allmulticast mode [ 259.729870][ T6115] team_slave_0: left allmulticast mode [ 259.750629][ T6115] team_slave_1: left allmulticast mode [ 259.763970][ T6115] team0: left promiscuous mode [ 259.783975][ T6115] team_slave_0: left promiscuous mode [ 259.801493][ T6115] team_slave_1: left promiscuous mode [ 259.811521][ T6115] bridge0: port 3(team0) entered disabled state [ 260.099300][ T6115] batman_adv: batadv0: Adding interface: team0 [ 260.111100][ T6115] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.971023][ T6128] Illegal XDP return value 4294967274 on prog (id 59) dev N/A, expect packet loss! [ 262.286428][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.292810][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.533961][ T6115] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 262.720178][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.731113][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.890182][ T5969] bridge_slave_0: entered allmulticast mode [ 262.899363][ T5969] bridge_slave_0: entered promiscuous mode [ 262.910913][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.918606][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.926064][ T5969] bridge_slave_1: entered allmulticast mode [ 262.934480][ T5969] bridge_slave_1: entered promiscuous mode [ 263.402334][ T5926] hsr_slave_0: entered promiscuous mode [ 263.436661][ T5926] hsr_slave_1: entered promiscuous mode [ 263.457493][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.481984][ T5926] Cannot create hsr debugfs directory [ 263.494381][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 263.494403][ T29] audit: type=1800 audit(1723604988.674:356): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.218" name="/" dev="fuse" ino=1 res=0 errno=0 [ 263.589229][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.672208][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.818471][ T5969] team0: Port device team_slave_0 added [ 265.833205][ T5969] team0: Port device team_slave_1 added [ 266.423951][ T29] audit: type=1400 audit(1723604991.554:357): avc: denied { ioctl } for pid=6157 comm="syz.0.223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 266.743991][ T29] audit: type=1400 audit(1723604991.884:358): avc: denied { lock } for pid=6161 comm="syz.1.224" path="socket:[10797]" dev="sockfs" ino=10797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 266.794883][ T6165] mmap: syz.3.225 (6165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.925714][ T1055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.233487][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.314281][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.292876][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.444274][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.459693][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.570432][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.626779][ T1055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.747339][ T6175] netlink: 64 bytes leftover after parsing attributes in process `syz.3.227'. [ 270.481559][ T1055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.401035][ T5969] hsr_slave_0: entered promiscuous mode [ 271.502739][ T5969] hsr_slave_1: entered promiscuous mode [ 271.585603][ T5969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.593232][ T5969] Cannot create hsr debugfs directory [ 271.990118][ T1055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.428675][ T29] audit: type=1400 audit(1723605000.604:359): avc: denied { ioctl } for pid=6219 comm="syz.1.233" path="socket:[11807]" dev="sockfs" ino=11807 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 276.705636][ T6231] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 276.712242][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.813817][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 276.846295][ T6232] vhci_hcd: connection closed [ 276.846686][ T35] vhci_hcd: stop threads [ 276.892481][ T35] vhci_hcd: release socket [ 276.924175][ T35] vhci_hcd: disconnect device [ 276.924239][ T1055] bridge_slave_1: left allmulticast mode [ 276.995673][ T1055] bridge_slave_1: left promiscuous mode [ 277.027428][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.114754][ T1055] bridge_slave_0: left allmulticast mode [ 277.139883][ T1055] bridge_slave_0: left promiscuous mode [ 277.176492][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.747391][ T6249] input: syz0 as /devices/virtual/input/input8 [ 277.787683][ T6250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.165761][ T5234] Bluetooth: hci2: Unknown advertising packet type: 0x70 [ 278.165919][ T5234] Bluetooth: hci2: adv larger than maximum supported [ 278.174589][ T5234] Bluetooth: hci2: Malformed LE Event: 0x0d [ 279.032532][ T29] audit: type=1400 audit(1723605004.214:360): avc: denied { getopt } for pid=6264 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 279.897948][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 280.278860][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.315401][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.342021][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.361420][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.370941][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.383083][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.391330][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.398937][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.561072][ T1055] bond0 (unregistering): Released all slaves [ 280.702940][ T6248] netlink: 44 bytes leftover after parsing attributes in process `syz.3.237'. [ 280.955192][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.432390][ T1055] hsr_slave_0: left promiscuous mode [ 281.511605][ T1055] hsr_slave_1: left promiscuous mode [ 281.617399][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.708425][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.764497][ T29] audit: type=1400 audit(1723605006.954:361): avc: denied { bind } for pid=6278 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 281.835640][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.843101][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.977455][ T5233] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 282.574446][ T5233] Bluetooth: hci6: command tx timeout [ 283.097733][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 283.107729][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 283.130382][ T6295] ceph: No mds server is up or the cluster is laggy [ 283.360117][ T1055] veth1_macvtap: left promiscuous mode [ 283.417896][ T1055] veth0_macvtap: left promiscuous mode [ 283.423805][ T1055] veth1_vlan: left promiscuous mode [ 283.444511][ T1055] veth0_vlan: left promiscuous mode [ 284.614292][ T5233] Bluetooth: hci6: command tx timeout [ 285.823259][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 285.947619][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 286.706936][ T5233] Bluetooth: hci6: command tx timeout [ 287.340669][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 288.418349][ T6271] chnl_net:caif_netlink_parms(): no params data found [ 288.452360][ T5969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.629161][ T5969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.657299][ T5969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.695870][ T5969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.774618][ T5233] Bluetooth: hci6: command tx timeout [ 288.996275][ T1055] bridge_slave_1: left allmulticast mode [ 289.001966][ T1055] bridge_slave_1: left promiscuous mode [ 289.048115][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.083776][ T1055] bridge_slave_0: left allmulticast mode [ 289.104006][ T1055] bridge_slave_0: left promiscuous mode [ 289.109823][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.440190][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.458093][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.489815][ T1055] bond0 (unregistering): Released all slaves [ 289.678044][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.731775][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.744555][ T6271] bridge_slave_0: entered allmulticast mode [ 289.761049][ T6271] bridge_slave_0: entered promiscuous mode [ 289.849738][ T1055] hsr_slave_0: left promiscuous mode [ 289.895259][ T1055] hsr_slave_1: left promiscuous mode [ 289.924155][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.933796][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.585848][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 290.649368][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 291.266252][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.273552][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.290295][ T6271] bridge_slave_1: entered allmulticast mode [ 291.322657][ T6271] bridge_slave_1: entered promiscuous mode [ 291.521357][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.588044][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.881540][ T6271] team0: Port device team_slave_0 added [ 291.918825][ T6271] team0: Port device team_slave_1 added [ 292.084071][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.091044][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.137645][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.181108][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.194442][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.225006][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.289673][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.519753][ T6271] hsr_slave_0: entered promiscuous mode [ 292.574371][ T6271] hsr_slave_1: entered promiscuous mode [ 292.614698][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.622348][ T6271] Cannot create hsr debugfs directory [ 293.759209][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.782479][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.794239][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.803655][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.815179][ T6271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.831660][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.840686][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.849826][ T6271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.879136][ T6271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.996665][ T6271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.435680][ T746] bridge_slave_1: left allmulticast mode [ 295.441390][ T746] bridge_slave_1: left promiscuous mode [ 295.474441][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.495455][ T746] bridge_slave_0: left allmulticast mode [ 295.501155][ T746] bridge_slave_0: left promiscuous mode [ 295.507544][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.975641][ T5234] Bluetooth: hci5: command tx timeout [ 296.577709][ T746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.598340][ T746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.626869][ T746] bond0 (unregistering): Released all slaves [ 296.694219][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 296.882903][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.967488][ T746] hsr_slave_0: left promiscuous mode [ 297.003270][ T746] hsr_slave_1: left promiscuous mode [ 297.032623][ T746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.049611][ T746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.728300][ T746] team0 (unregistering): Port device team_slave_1 removed [ 297.856751][ T746] team0 (unregistering): Port device team_slave_0 removed [ 298.064929][ T5234] Bluetooth: hci5: command tx timeout [ 298.699602][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.782177][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.789369][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.834223][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.841540][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.164182][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.171411][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.199074][ T6320] bridge_slave_0: entered allmulticast mode [ 299.226422][ T6320] bridge_slave_0: entered promiscuous mode [ 299.286517][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.306281][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.313639][ T6320] bridge_slave_1: entered allmulticast mode [ 299.326756][ T6320] bridge_slave_1: entered promiscuous mode [ 299.584669][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.638361][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.808138][ T6320] team0: Port device team_slave_0 added [ 299.870314][ T6320] team0: Port device team_slave_1 added [ 299.999719][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.019169][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.113949][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.143923][ T5234] Bluetooth: hci5: command tx timeout [ 300.178544][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.196470][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.270121][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.428441][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.717835][ T6320] hsr_slave_0: entered promiscuous mode [ 300.760054][ T6320] hsr_slave_1: entered promiscuous mode [ 300.766821][ T6320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.795307][ T6320] Cannot create hsr debugfs directory [ 301.556629][ T6271] veth0_vlan: entered promiscuous mode [ 301.739389][ T6271] veth1_vlan: entered promiscuous mode [ 302.005281][ T6271] veth0_macvtap: entered promiscuous mode [ 302.071159][ T6271] veth1_macvtap: entered promiscuous mode [ 302.158335][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.214286][ T5234] Bluetooth: hci5: command tx timeout [ 302.215450][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.258753][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.275344][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.305289][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.333949][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.374131][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.403988][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.429867][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.462993][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.501690][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.604156][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.653968][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.663830][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.697266][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.707212][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.724046][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.735798][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.754929][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.783002][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.808611][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.826656][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.896600][ T6271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.929338][ T6271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.939328][ T6271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.954388][ T6271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.238041][ T6320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.311621][ T6320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.358742][ T6320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.407247][ T6320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.606736][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.640929][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.860661][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.893035][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.081943][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.211187][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.235999][ T6335] ======================================================= [ 304.235999][ T6335] WARNING: The mand mount option has been deprecated and [ 304.235999][ T6335] and is ignored by this kernel. Remove the mand [ 304.235999][ T6335] option from the mount to silence this warning. [ 304.235999][ T6335] ======================================================= [ 304.321675][ T6335] /dev/nullb0: Can't open blockdev [ 304.322560][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.334755][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.119974][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.127529][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.887680][ T29] audit: type=1400 audit(1723605031.074:362): avc: denied { append } for pid=6349 comm="syz.1.249" name="loop9" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.976384][ T29] audit: type=1400 audit(1723605031.104:363): avc: denied { watch watch_reads } for pid=6349 comm="syz.1.249" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.999933][ T6351] input: syz0 as /devices/virtual/input/input9 [ 306.108116][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.488813][ T29] audit: type=1400 audit(1723605031.674:364): avc: denied { mount } for pid=6362 comm="syz.1.252" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 306.934456][ T30] INFO: task syz.4.86:5598 blocked for more than 143 seconds. [ 306.946318][ T30] Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 306.955169][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.964109][ T30] task:syz.4.86 state:D stack:26224 pid:5598 tgid:5593 ppid:5220 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.054178][ T30] Call Trace: [ 307.096314][ T30] [ 307.108089][ T30] __schedule+0xe37/0x5490 [ 307.145265][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 307.207101][ T30] ? __pfx___schedule+0x10/0x10 [ 307.212033][ T30] ? schedule+0x298/0x350 [ 307.335121][ T30] ? __pfx_lock_release+0x10/0x10 [ 307.340239][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 307.364979][ T30] schedule+0xe7/0x350 [ 307.369222][ T30] io_schedule+0xbf/0x130 [ 307.373598][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 307.443284][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 307.474305][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 307.480174][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 307.537444][ T30] ? __pfx___might_resched+0x10/0x10 [ 307.604256][ T30] ? filemap_get_folios_tag+0x45e/0xad0 [ 307.609897][ T30] invalidate_inode_pages2_range+0x8be/0x1230 [ 307.642393][ T30] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 307.652150][ T30] ? __pfx_inode_needs_update_time+0x10/0x10 [ 307.689823][ T30] ? filemap_check_errors+0xa9/0x160 [ 307.778109][ T30] kiocb_invalidate_pages+0x10e/0x180 [ 307.783596][ T30] blkdev_write_iter+0x441/0xc20 [ 307.803440][ T30] iter_file_splice_write+0x906/0x10b0 [ 307.824002][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 307.829944][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 307.854263][ T30] ? do_splice_read+0x22/0x380 [ 307.870776][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 307.914032][ T30] direct_splice_actor+0x19b/0x6d0 [ 307.919259][ T30] splice_direct_to_actor+0x346/0xa40 [ 307.934871][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 307.940568][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 307.965198][ T30] ? __pfx___might_resched+0x10/0x10 [ 307.981347][ T30] ? __pfx_lock_release+0x10/0x10 [ 307.986534][ T30] do_splice_direct+0x17e/0x250 [ 307.991423][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 307.996972][ T30] ? avc_policy_seqno+0x9/0x20 [ 308.011135][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 308.026670][ T30] ? security_file_permission+0x98/0xc0 [ 308.032288][ T30] do_sendfile+0xb1e/0xe50 [ 308.044848][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 308.049870][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 308.071214][ T30] ? __x64_sys_futex+0x1ea/0x4c0 [ 308.087889][ T30] __x64_sys_sendfile64+0x1da/0x220 [ 308.123986][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 308.129966][ T30] do_syscall_64+0xcd/0x250 [ 308.137020][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.142961][ T30] RIP: 0033:0x7fde5bb799f9 [ 308.160186][ T30] RSP: 002b:00007fde5c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.183936][ T30] RAX: ffffffffffffffda RBX: 00007fde5bd16130 RCX: 00007fde5bb799f9 [ 308.241769][ T30] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 308.254890][ T30] RBP: 00007fde5bbe78ee R08: 0000000000000000 R09: 0000000000000000 [ 308.262982][ T30] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000000 [ 308.302547][ T30] R13: 0000000000000000 R14: 00007fde5bd16130 R15: 00007ffce67afc98 [ 308.322263][ T30] [ 308.334518][ T30] [ 308.334518][ T30] Showing all locks held in the system: [ 308.342589][ T30] 1 lock held by khungtaskd/30: [ 308.394968][ T30] #0: ffffffff8ddb5ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 308.480984][ T30] 5 locks held by kworker/u8:7/1063: [ 308.504286][ T30] 2 locks held by getty/4976: [ 308.508993][ T30] #0: ffff88802b3a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 308.556002][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 308.608575][ T30] 1 lock held by syz-executor/5225: [ 308.613814][ T30] 2 locks held by kworker/0:3/5275: [ 308.650530][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 308.728099][ T30] #1: ffffc9000368fd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 308.753523][ T30] 2 locks held by syz.2.57/5499: [ 308.759430][ T30] 2 locks held by kworker/u8:10/5899: [ 308.802430][ T30] #0: ffff88801a702948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 308.904012][ T30] #1: ffffc9000377fd80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 308.964028][ T30] 2 locks held by syz.2.247/6355: [ 308.969121][ T30] #0: ffff88804fea60e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100 [ 309.037297][ T30] #1: ffffffff8ddc1478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 309.094085][ T30] 1 lock held by syz.3.251/6359: [ 309.099252][ T30] #0: ffffffff8ddc1478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 309.153986][ T30] [ 309.174005][ T30] ============================================= [ 309.174005][ T30] [ 309.182501][ T30] NMI backtrace for cpu 0 [ 309.186853][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 309.197454][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 309.207528][ T30] Call Trace: [ 309.210819][ T30] [ 309.213754][ T30] dump_stack_lvl+0x116/0x1f0 [ 309.218460][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 309.223411][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.229444][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 309.235451][ T30] watchdog+0xf4e/0x1280 [ 309.239708][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.244400][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.249617][ T30] ? __kthread_parkme+0x148/0x220 [ 309.254680][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.259377][ T30] kthread+0x2c1/0x3a0 [ 309.263520][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.268759][ T30] ? __pfx_kthread+0x10/0x10 [ 309.273381][ T30] ret_from_fork+0x45/0x80 [ 309.277823][ T30] ? __pfx_kthread+0x10/0x10 [ 309.282419][ T30] ret_from_fork_asm+0x1a/0x30 [ 309.287207][ T30] [ 309.292506][ T30] Sending NMI from CPU 0 to CPUs 1: [ 309.298852][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 309.487447][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 309.494357][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 309.504987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 309.515084][ T30] Call Trace: [ 309.518382][ T30] [ 309.521328][ T30] dump_stack_lvl+0x3d/0x1f0 [ 309.525974][ T30] panic+0x6f5/0x7a0 [ 309.529911][ T30] ? __pfx_panic+0x10/0x10 [ 309.534366][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 309.539782][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.545842][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 309.551249][ T30] ? watchdog+0xd8a/0x1280 [ 309.555705][ T30] ? watchdog+0xd7d/0x1280 [ 309.560169][ T30] watchdog+0xd9b/0x1280 [ 309.564467][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.569196][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.574442][ T30] ? __kthread_parkme+0x148/0x220 [ 309.579696][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.584421][ T30] kthread+0x2c1/0x3a0 [ 309.588528][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.593765][ T30] ? __pfx_kthread+0x10/0x10 [ 309.598392][ T30] ret_from_fork+0x45/0x80 [ 309.602859][ T30] ? __pfx_kthread+0x10/0x10 [ 309.607486][ T30] ret_from_fork_asm+0x1a/0x30 [ 309.612306][ T30] [ 309.615475][ T30] Kernel Offset: disabled [ 309.619830][ T30] Rebooting in 86400 seconds..