last executing test programs: 36.154002619s ago: executing program 0 (id=469): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x296, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) creat(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x1, &(0x7f0000000640)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="88010000100013070000000000000000fe800000000000000000000000000800000000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012006d6f7275733634302d7373653200"/300], 0x188}}, 0x0) 35.00912887s ago: executing program 0 (id=470): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240), 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000340), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000600)={0x0, 0x80}, 0x2}, 0x0) futex(&(0x7f0000000000), 0x100, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x3, 0x0, 0xee01, 0x0, 0x0, 0x32, 0x1000}, 0x0, 0x0, 0x7, 0x8001, 0xc41, 0x73, 0x9, 0x1, 0x6, 0x0, 0x0, r3}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r4, 0x1, 0x9, 0x0, &(0x7f00000014c0)) getpid() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6c, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x2, @private1, 0xffffff80}}}, &(0x7f0000000d00)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r7, 0x6, "15d713106e8b"}, &(0x7f00000000c0)=0xe) 34.408344343s ago: executing program 0 (id=472): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x3ff, 0x4f6482) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) iopl(0x3) lchown(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000001b000012000000004b28c962170b7020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c20000000000000000000000e8000000e80000001801000069703600000100000000000009000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e0000000000000000000000004000000000000000000080000000000000000000000000063e0049040010005f000000000000000000000000000000000800000000000400"/424]}, 0x220) 32.60310395s ago: executing program 0 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x2a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x40) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r3, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003f1) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r5}}, './bus\x00'}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 32.3669644s ago: executing program 0 (id=477): ioperm(0x0, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x0, 0x158, 0x98, 0x1f0, 0x0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @loopback, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x28}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x3d253b58f86430b, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c40)={{}, 0x0, 0x10, @unused=[0x4, 0xffffffffffffff00, 0xfa8f, 0x2], @name="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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) waitid(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd) 31.616129975s ago: executing program 0 (id=480): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f00000014c0)=[{0x0}], 0x1, 0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 20.352110234s ago: executing program 3 (id=499): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r6 = syz_pidfd_open(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0xc0085508, &(0x7f0000002200)={{r5}, "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"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x94b9c7be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}) unlink(&(0x7f0000000140)='./cgroup\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 19.120311893s ago: executing program 3 (id=502): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pipe(&(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000001703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000002d000000000000005504000001ed0a001700000017ffffff9f040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x80000, 0x1000000}) listen(r0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000040), 0x8) 17.254589338s ago: executing program 3 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sched_switch\x00', r3}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0x228, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000000c0), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) sendmsg$nl_route_sched(r4, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 13.31093453s ago: executing program 3 (id=513): prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r4 = gettid() mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x14, 0x0, @tid=r4}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.747766504s ago: executing program 1 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) geteuid() getresgid(&(0x7f00000023c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_MOD_XOR={0x15, 0xb, {{{}, 0x0, 0x0, 0x0, 0x0, "f234b36461c3bd6f"}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.751866464s ago: executing program 2 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000680)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d80)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x3, 0xf000080) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25b45, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x82000000}, 0x50) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001700)={@dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x41040008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000004000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200e208000000b7030000efffffff8453cc4d610000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000600)={0xfffd, 0x0, 0x0, 0x6}) 9.685838661s ago: executing program 1 (id=519): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x508c1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6}, 0x10) syz_emit_ethernet(0x1011, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="f1"}) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) 9.352205381s ago: executing program 4 (id=520): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x5085, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x2, 0x0, 0x21}, 0x7, 0x8, &(0x7f0000001500)={{0x4, 0xffffffc0, 0x10000000, 0xab17}}, 0x2, &(0x7f0000001540)="e8865f3ada67ab60994d5df139b659447e01eb73ad03dc2c67db272738174e2c977ed1c950d815ff8ff69a48e35b79d34e895e4d94fc24433914d4e14874058653725d7461dd02f49b02b24847836dbd193e2bcc73a77400bbfe8ad0afacc9b2b24c0dd4c7ab2fcfe323267fdd9e16769263", 0x5}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, &(0x7f0000000300)="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", 0x7dc, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="fa969501dc00d841a2e6c597bbd8e24cf9253a27f4200b46f92f91d4e111141185dce107cf3c281fd6ec7ffe0b9c79e0b6e28e8dd915a1bb92bc2465b21fd7f99a46d05a5cb7361043c37491204b977b5168ea0cc4322a93db9aa5abca0a08a8cbf1d87de099a351fab9186a706643abcb3c3bab07511ad9e2a854846ff6f2f684771cb1f279eefb64b0780a59bf0ea318cbca53b0a27bb59c4329d8f4bf24a0dd3d482514bdd2c23af0a37abf7eff4089be189366f12f830d4512107cef591716003f41b22a3875f9c5d4cfddf149e9e5ac42e20fb6c95741") r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 8.307481378s ago: executing program 4 (id=521): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x0, &(0x7f0000000240)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x40200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000080)={0x2, 0x4, 0xd, 0x5, 0x101}) 8.305896221s ago: executing program 2 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000100), 0x8) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) open$dir(0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) connect$ax25(r5, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 6.833040587s ago: executing program 1 (id=523): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f04ebbeea, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4106, 0x100a}], 0x1, 0x7a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, r5, 0x603, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000140)=[{r8}], 0x1, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 6.832467568s ago: executing program 2 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@hopopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) syz_emit_ethernet(0x3ca, &(0x7f0000000bc0)={@local, @random="302d5bd3ca80", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ce5f00", 0x394, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x24, "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"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c69"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.502824906s ago: executing program 4 (id=525): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kexec_crash_size', 0x149e00, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000240)={0x10, 0x5, 0x1, 0x7fff, 0x40, 0x93ea}) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0x6}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xf, &(0x7f0000000080)=@ringbuf, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000002c0)={0x0, "2655dc2c0a95d95e8e56ee24fc2e59456a8ae9b7381abe399291b32894be5a035eaf8c55317f2a0768d96a85c7991b959171574bc1ccedef5ccb103607c652a5", 0x40}, 0x48, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "b72fb9495eb36d960b31fdcb1425b839e4d134b18cf5fd9beced3de2778075f4bd45e77a023badd36c079fe78432f009c01b7b3473085a35f645cb2eae68ab0d", 0x21}, 0x48, r4) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r5, 0x0, 0x0) 5.69500203s ago: executing program 2 (id=526): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000301"], 0x44}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.465066446s ago: executing program 1 (id=527): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000600)=0xfffffffb, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001180)={'mangle\x00', 0x2, [{}, {}]}, 0x48) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) modify_ldt$write(0x1, &(0x7f0000000080)={0x7fd, 0x20000800}, 0x10) modify_ldt$read(0x0, &(0x7f00000000c0)=""/4122, 0x101a) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001140)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') rt_sigprocmask(0x0, &(0x7f0000000180), 0xffffffffffffffff, 0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) write$hidraw(r4, &(0x7f0000001100)="a80bda984852433f5f3b77e45f9b52113377114088cf651a010605a38d2959ab4d167acb4f84acfd825cd68dd355197b5270c243a1aff528870a", 0x3a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)={'#! ', './file0/../file0/../file0/../file0', [{0x20, 'gre0\x00'}, {0x20, '*'}, {0x20, '%{{'}, {0x20, 'aI\xff\xff\xff\xff'}], 0xa, "ef1f164ff163dc0600000034cdc59a73adf3bfde79dbfb7d8b027be9b949cc3aacb000de282a50264e79bb5de19c196df472b9e9b2598ac5bcbd39515ad9330829a34f3071f025e463f2d36e7b72520a75ffc41fee14ee608b0fb46ad3c7be4b98fe90e0dd2f67592e45fbf7e5913a4d46bf0df933154642"}, 0xb1) 5.35879432s ago: executing program 3 (id=528): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x2, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) getresuid(&(0x7f0000000080), 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000900)={0xa, 0x7fff, 0x23b, 0x3eb, 0x400, 0x8000000000000000, 0x5, 0x400}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x2a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) ioprio_get$uid(0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) 4.724048573s ago: executing program 1 (id=529): write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x53) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="9a2a6947f5f2ba12"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000033f000/0x2000)=nil, 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x624822, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 3.675959302s ago: executing program 1 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80), 0x0, 0x4050040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x100008, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x13}, 0x2, 0x0) open(0x0, 0x141040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) finit_module(r0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000000)=""/194, &(0x7f0000000100)=""/166, &(0x7f0000000280)=""/191, 0x5000}) 3.496201958s ago: executing program 4 (id=531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000002500)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x12) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="fb", 0x1, 0x20040010, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) r2 = dup3(0xffffffffffffffff, r1, 0x0) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) 2.721778767s ago: executing program 2 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r5}, 0x38) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 2.135848605s ago: executing program 4 (id=533): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x4) ptrace(0x4206, r4) ptrace(0x4207, r4) ptrace$getregs(0xc, r4, 0x0, &(0x7f0000000380)=""/78) 1.399143942s ago: executing program 2 (id=534): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x1170006, 0x0) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYBLOB="dd7de854ef8c483f3376f6cf950f183f61c57ca48cd26fabf51380c4e9d35cd19c1f5206e443c255", @ANYRESOCT], 0x17) r1 = syz_open_procfs(r0, &(0x7f0000000340)='net/ip_tables_targets\x00') write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x200000000000000, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000200)=0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000c500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 65.109762ms ago: executing program 4 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) capset(&(0x7f0000000080), &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r2]) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)) syz_clone(0x10000291, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 0s ago: executing program 3 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000200), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) io_setup(0x7, &(0x7f0000000280)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): 41.758163][ T5412] hsr_slave_0: left promiscuous mode [ 241.784032][ T5412] hsr_slave_1: left promiscuous mode [ 241.784603][ T46] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 241.804554][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.805909][ T6816] syz.1.255 (6816): /proc/6815/oom_adj is deprecated, please use /proc/6815/oom_score_adj instead. [ 241.870713][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.877347][ T46] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 241.914625][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.953637][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.087234][ T5412] veth1_macvtap: left promiscuous mode [ 242.104395][ T5412] veth0_macvtap: left promiscuous mode [ 242.117205][ T5412] veth1_vlan: left promiscuous mode [ 242.137137][ T5412] veth0_vlan: left promiscuous mode [ 242.426399][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.605587][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 242.634144][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 242.652283][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 242.661231][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 242.673043][ T9] usb 2-1: config 250 has no interface number 0 [ 242.691421][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 242.706642][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 242.749976][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 242.805127][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 242.821670][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 242.821686][ T29] audit: type=1400 audit(1727466831.950:490): avc: denied { read } for pid=6828 comm="syz.3.256" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.830490][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 242.873680][ T29] audit: type=1400 audit(1727466831.980:491): avc: denied { open } for pid=6828 comm="syz.3.256" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.903859][ T29] audit: type=1400 audit(1727466831.980:492): avc: denied { ioctl } for pid=6828 comm="syz.3.256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.985647][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 243.007134][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 243.022553][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 243.031298][ T9] usb 2-1: Product: syz [ 243.040422][ T9] usb 2-1: SerialNumber: syz [ 243.119022][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 243.132339][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 243.336707][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 243.424487][ T29] audit: type=1400 audit(1727466832.550:493): avc: denied { module_request } for pid=6831 comm="syz.0.257" kmod="crypto-cryptd(__generic-gcm-aesni-avx)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.721904][ T29] audit: type=1400 audit(1727466832.850:494): avc: denied { setopt } for pid=6831 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.200236][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 244.215932][ T9] usb 2-1: USB disconnect, device number 3 [ 244.244557][ T9] usblp0: removed [ 244.348589][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 244.793691][ T29] audit: type=1400 audit(1727466833.750:495): avc: denied { ioctl } for pid=6839 comm="syz.3.258" path="socket:[13957]" dev="sockfs" ino=13957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.819360][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.300840][ T6849] ebt_limit: overflow, try lower: 0/0 [ 246.591596][ T29] audit: type=1400 audit(1727466835.720:496): avc: denied { create } for pid=6850 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.176177][ T29] audit: type=1400 audit(1727466836.040:497): avc: denied { create } for pid=6852 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.206167][ T29] audit: type=1400 audit(1727466836.160:498): avc: denied { connect } for pid=6852 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.164761][ T29] audit: type=1400 audit(1727466836.350:499): avc: denied { connect } for pid=6850 comm="syz.0.261" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.813255][ T29] audit: type=1400 audit(1727466838.930:500): avc: denied { write } for pid=6852 comm="syz.1.262" path="socket:[13986]" dev="sockfs" ino=13986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.738321][ T29] audit: type=1400 audit(1727466839.800:501): avc: denied { read } for pid=6861 comm="syz.0.263" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 250.738373][ T29] audit: type=1400 audit(1727466839.800:502): avc: denied { open } for pid=6861 comm="syz.0.263" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 250.738413][ T29] audit: type=1400 audit(1727466839.810:503): avc: denied { create } for pid=6861 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 250.738451][ T29] audit: type=1400 audit(1727466839.830:504): avc: denied { create } for pid=6863 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 250.738487][ T29] audit: type=1400 audit(1727466839.830:505): avc: denied { create } for pid=6863 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.738524][ T29] audit: type=1400 audit(1727466839.840:506): avc: denied { read write } for pid=6863 comm="syz.1.264" name="video3" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.739920][ T29] audit: type=1400 audit(1727466839.840:507): avc: denied { open } for pid=6863 comm="syz.1.264" path="/dev/video3" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.739962][ T29] audit: type=1400 audit(1727466839.840:508): avc: denied { ioctl } for pid=6863 comm="syz.1.264" path="/dev/video3" dev="devtmpfs" ino=849 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.902324][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.331496][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.341535][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.372370][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.670298][ T6588] hsr_slave_0: entered promiscuous mode [ 251.755824][ T6588] hsr_slave_1: entered promiscuous mode [ 251.859782][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.895496][ T6588] Cannot create hsr debugfs directory [ 251.962957][ T5572] bridge0: port 3(syz_tun) entered disabled state [ 252.003889][ T5572] syz_tun (unregistering): left allmulticast mode [ 252.010837][ T5572] syz_tun (unregistering): left promiscuous mode [ 252.017336][ T5572] bridge0: port 3(syz_tun) entered disabled state [ 252.469063][ T6897] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 253.810690][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 253.810735][ T29] audit: type=1400 audit(1727466841.600:524): avc: denied { mac_admin } for pid=6891 comm="syz.3.269" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.847730][ T29] audit: type=1400 audit(1727466841.610:525): avc: denied { relabelto } for pid=6891 comm="syz.3.269" name="memory.events" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 253.874341][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.880618][ T29] audit: type=1400 audit(1727466841.610:526): avc: denied { associate } for pid=6891 comm="syz.3.269" name="memory.events" dev="tmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 253.907986][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.914606][ T29] audit: type=1400 audit(1727466842.980:527): avc: denied { mounton } for pid=6900 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 253.922276][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.938541][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.939176][ T29] audit: type=1400 audit(1727466842.980:528): avc: denied { mount } for pid=6900 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 253.949460][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.952489][ T29] audit: type=1400 audit(1727466842.980:529): avc: denied { read } for pid=6900 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 253.976634][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.981565][ T29] audit: type=1400 audit(1727466842.980:530): avc: denied { open } for pid=6900 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 254.004564][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.009275][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.115494][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.126080][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.171629][ T29] audit: type=1400 audit(1727466843.300:531): avc: denied { mounton } for pid=6900 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 254.200798][ T29] audit: type=1400 audit(1727466843.300:532): avc: denied { unlink } for pid=6196 comm="syz-executor" name="memory.events" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 254.770655][ T29] audit: type=1400 audit(1727466843.880:533): avc: denied { read } for pid=6904 comm="syz.3.272" name="event2" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.958028][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974564][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.247054][ T5231] Bluetooth: hci3: command tx timeout [ 256.824105][ T5412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.899691][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 257.034756][ T5412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.239032][ T5412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.418245][ T5412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.881911][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.417717][ T5231] Bluetooth: hci3: command tx timeout [ 258.423253][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.431386][ T6900] bridge_slave_0: entered allmulticast mode [ 258.545123][ T6900] bridge_slave_0: entered promiscuous mode [ 258.674220][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.685514][ T6957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.700125][ T6957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.731231][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.775094][ T6957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.785726][ T6900] bridge_slave_1: entered allmulticast mode [ 258.792922][ T6900] bridge_slave_1: entered promiscuous mode [ 258.821848][ T6957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.849915][ T6957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.962043][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 258.962056][ T29] audit: type=1400 audit(1727466848.090:553): avc: denied { open } for pid=6963 comm="syz.0.279" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 258.996517][ T6957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.229324][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.257939][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.331446][ T6588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.450789][ T6588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.487807][ T6588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.555706][ T6974] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 259.848602][ T6900] team0: Port device team_slave_0 added [ 260.835529][ T6974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.279'. [ 260.835909][ T5231] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.865324][ T6588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.885859][ T5231] Bluetooth: hci3: command 0x0419 tx timeout [ 262.823711][ T6900] team0: Port device team_slave_1 added [ 262.830142][ T5412] bridge_slave_1: left allmulticast mode [ 262.848597][ T5412] bridge_slave_1: left promiscuous mode [ 262.876153][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.887263][ T5231] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.894282][ T5412] bridge_slave_0: left allmulticast mode [ 262.901030][ T5412] bridge_slave_0: left promiscuous mode [ 262.908779][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.965627][ T5231] Bluetooth: hci3: command 0x0419 tx timeout [ 264.059767][ T29] audit: type=1400 audit(1727466853.190:554): avc: denied { getopt } for pid=7003 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.066215][ T7008] sctp: [Deprecated]: syz.1.284 (pid 7008) Use of int in maxseg socket option. [ 264.066215][ T7008] Use struct sctp_assoc_value instead [ 264.154616][ T29] audit: type=1400 audit(1727466853.280:555): avc: denied { write } for pid=7003 comm="syz.1.284" name="event2" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 264.558891][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.576516][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.592477][ T5412] bond0 (unregistering): Released all slaves [ 264.614754][ T5412] bond1 (unregistering): Released all slaves [ 264.967200][ T5231] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.046584][ T5231] Bluetooth: hci3: command 0x0419 tx timeout [ 265.156921][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.167146][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.203613][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.412925][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.445802][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.481017][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.842233][ T29] audit: type=1400 audit(1727466854.880:556): avc: denied { ioctl } for pid=7023 comm="syz.0.286" path="socket:[14816]" dev="sockfs" ino=14816 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 266.529822][ T29] audit: type=1400 audit(1727466854.950:557): avc: denied { bind } for pid=7023 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.728687][ T6900] hsr_slave_0: entered promiscuous mode [ 266.736698][ T6900] hsr_slave_1: entered promiscuous mode [ 266.749060][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.423194][ T6900] Cannot create hsr debugfs directory [ 267.429032][ T29] audit: type=1400 audit(1727466855.960:558): avc: denied { write } for pid=7028 comm="syz.0.287" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.472784][ T5231] Bluetooth: hci3: command 0x0419 tx timeout [ 267.559408][ T5412] hsr_slave_0: left promiscuous mode [ 267.609174][ T5412] hsr_slave_1: left promiscuous mode [ 267.625632][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.633321][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.785092][ T29] audit: type=1400 audit(1727466856.830:559): avc: denied { setopt } for pid=7038 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 268.406339][ T29] audit: type=1400 audit(1727466856.840:560): avc: denied { read } for pid=7038 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 268.425952][ T29] audit: type=1400 audit(1727466856.900:561): avc: denied { sys_module } for pid=7038 comm="syz.0.290" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 268.475744][ T29] audit: type=1400 audit(1727466856.900:562): avc: denied { module_load } for pid=7038 comm="syz.0.290" path="/sys/power/wakeup_count" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 268.502477][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.512544][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.586966][ T5412] veth1_macvtap: left promiscuous mode [ 268.592547][ T5412] veth0_macvtap: left promiscuous mode [ 268.615650][ T5412] veth1_vlan: left promiscuous mode [ 268.630810][ T5412] veth0_vlan: left promiscuous mode [ 269.564639][ T29] audit: type=1400 audit(1727466858.130:563): avc: denied { create } for pid=7053 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 269.585124][ T29] audit: type=1400 audit(1727466858.140:564): avc: denied { write } for pid=7053 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 269.606758][ T29] audit: type=1400 audit(1727466858.150:565): avc: denied { nlmsg_read } for pid=7053 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 270.061090][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.293'. [ 270.920292][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 271.068834][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 271.126080][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 271.133518][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 271.142749][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.152083][ T9] usb 4-1: Product: syz [ 271.157070][ T9] usb 4-1: Manufacturer: syz [ 271.161708][ T9] usb 4-1: SerialNumber: syz [ 271.173930][ T9] usb 4-1: config 0 descriptor?? [ 271.208995][ T9] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 271.457774][ T29] audit: type=1400 audit(1727466860.590:566): avc: denied { append } for pid=7061 comm="syz.3.293" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 271.481101][ T29] audit: type=1400 audit(1727466860.590:567): avc: denied { open } for pid=7061 comm="syz.3.293" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 271.509764][ T29] audit: type=1400 audit(1727466860.630:568): avc: denied { ioctl } for pid=7061 comm="syz.3.293" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 271.784964][ T7052] warning: `syz.0.291' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 272.217750][ T29] audit: type=1400 audit(1727466861.320:569): avc: denied { ioctl } for pid=7071 comm="syz.1.294" path="/dev/input/event2" dev="devtmpfs" ino=837 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 273.286000][ T8] usb 4-1: USB disconnect, device number 3 [ 274.805642][ T29] audit: type=1400 audit(1727466863.930:570): avc: denied { create } for pid=7080 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.880723][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.505777][ T29] audit: type=1400 audit(1727466864.460:571): avc: denied { mount } for pid=7082 comm="syz.0.295" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.122925][ T29] audit: type=1400 audit(1727466864.750:572): avc: denied { read } for pid=7084 comm="syz.3.297" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.148365][ T29] audit: type=1400 audit(1727466864.750:573): avc: denied { open } for pid=7084 comm="syz.3.297" path="/dev/ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.171819][ T29] audit: type=1400 audit(1727466864.770:574): avc: denied { ioctl } for pid=7084 comm="syz.3.297" path="/dev/ptp0" dev="devtmpfs" ino=1073 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.196779][ T29] audit: type=1400 audit(1727466864.790:575): avc: denied { mount } for pid=7084 comm="syz.3.297" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 276.218627][ T29] audit: type=1400 audit(1727466864.810:576): avc: denied { mounton } for pid=7084 comm="syz.3.297" path="/22/file0/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 276.454733][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 276.582731][ T29] audit: type=1400 audit(1727466865.650:577): avc: denied { unmount } for pid=6196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 276.864354][ T29] audit: type=1400 audit(1727466865.990:578): avc: denied { create } for pid=7099 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 277.536534][ T6900] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.573544][ T6900] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.589245][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.603132][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.622463][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.638418][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.646180][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.654383][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.993367][ T6900] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.018352][ T29] audit: type=1400 audit(1727466867.140:579): avc: denied { connect } for pid=7120 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.033477][ T6900] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.708622][ T5233] Bluetooth: hci1: command tx timeout [ 280.955535][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 280.955559][ T29] audit: type=1400 audit(1727466870.000:583): avc: denied { create } for pid=7140 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.267073][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.303'. [ 281.278328][ T7139] unsupported nlmsg_type 40 [ 281.396014][ T29] audit: type=1400 audit(1727466870.400:584): avc: denied { write } for pid=7137 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.505474][ T29] audit: type=1400 audit(1727466870.400:585): avc: denied { nlmsg_write } for pid=7137 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.786850][ T29] audit: type=1400 audit(1727466870.480:586): avc: denied { create } for pid=7140 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.795609][ T5233] Bluetooth: hci1: command tx timeout [ 282.433594][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.452094][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.475338][ T6900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.485833][ T6900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.594445][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.601846][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.611636][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.618837][ T5402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.731105][ T29] audit: type=1400 audit(1727466871.820:587): avc: denied { create } for pid=7150 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.751407][ T29] audit: type=1400 audit(1727466871.830:588): avc: denied { bind } for pid=7150 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.772743][ T29] audit: type=1400 audit(1727466871.880:589): avc: denied { connect } for pid=7150 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.772961][ T7156] xt_l2tp: invalid flags combination: c [ 282.796876][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 282.798817][ T29] audit: type=1400 audit(1727466871.900:590): avc: denied { getopt } for pid=7150 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.976328][ T12] bridge_slave_1: left allmulticast mode [ 282.982673][ T12] bridge_slave_1: left promiscuous mode [ 283.021461][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.206244][ T12] bridge_slave_0: left allmulticast mode [ 283.211957][ T12] bridge_slave_0: left promiscuous mode [ 283.218453][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.862881][ T5233] Bluetooth: hci1: command tx timeout [ 285.188630][ T29] audit: type=1400 audit(1727466874.160:591): avc: denied { mount } for pid=7185 comm="syz.1.309" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 285.211848][ T29] audit: type=1400 audit(1727466874.170:592): avc: denied { mounton } for pid=7185 comm="syz.1.309" path="/98/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 286.615897][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 286.615918][ T29] audit: type=1400 audit(1727466874.980:596): avc: denied { mount } for pid=7191 comm="syz.1.310" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 286.646933][ T5233] Bluetooth: hci1: command tx timeout [ 286.652459][ T29] audit: type=1400 audit(1727466874.980:597): avc: denied { search } for pid=7191 comm="syz.1.310" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.678645][ T29] audit: type=1400 audit(1727466874.980:598): avc: denied { read } for pid=7191 comm="syz.1.310" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.700808][ T29] audit: type=1400 audit(1727466874.980:599): avc: denied { open } for pid=7191 comm="syz.1.310" path="/99/file0" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.726206][ T29] audit: type=1400 audit(1727466875.850:600): avc: denied { shutdown } for pid=7183 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.835700][ T29] audit: type=1400 audit(1727466875.930:601): avc: denied { unmount } for pid=5216 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 287.039111][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.052828][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.074024][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.124457][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.187459][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.202222][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.343816][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.365007][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.379044][ T12] bond0 (unregistering): Released all slaves [ 288.171635][ T29] audit: type=1400 audit(1727466877.300:602): avc: denied { read } for pid=7209 comm="syz.0.314" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 288.209796][ T29] audit: type=1400 audit(1727466877.300:603): avc: denied { open } for pid=7209 comm="syz.0.314" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 288.235335][ T29] audit: type=1400 audit(1727466877.300:604): avc: denied { ioctl } for pid=7209 comm="syz.0.314" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 288.751021][ T7216] xt_time: unknown flags 0xc [ 288.792209][ T7218] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 289.540605][ T29] audit: type=1400 audit(1727466877.910:605): avc: denied { mounton } for pid=7209 comm="syz.0.314" path="/93/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.770959][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 289.778368][ T5230] Bluetooth: hci4: command tx timeout [ 292.064685][ T5231] Bluetooth: hci4: command tx timeout [ 292.180969][ T12] hsr_slave_0: left promiscuous mode [ 292.217038][ T12] hsr_slave_1: left promiscuous mode [ 292.224466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.262868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.281487][ T29] audit: type=1400 audit(1727466881.410:606): avc: denied { getopt } for pid=7223 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.728276][ T7238] syz.1.317: attempt to access beyond end of device [ 292.728276][ T7238] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 293.565563][ T12] team0 (unregistering): Port device team_slave_1 removed [ 293.608323][ T12] team0 (unregistering): Port device team_slave_0 removed [ 293.781048][ T29] audit: type=1400 audit(1727466882.910:607): avc: denied { read write } for pid=7240 comm="syz.1.318" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 293.825743][ T29] audit: type=1400 audit(1727466882.940:608): avc: denied { open } for pid=7240 comm="syz.1.318" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 293.873253][ T29] audit: type=1326 audit(1727466883.000:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.0.319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b7357df39 code=0x0 [ 293.969889][ T29] audit: type=1400 audit(1727466883.090:610): avc: granted { setsecparam } for pid=7245 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 294.078923][ T29] audit: type=1400 audit(1727466883.100:611): avc: denied { write } for pid=7245 comm="syz.0.319" name="/" dev="configfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 294.103031][ T5233] Bluetooth: hci4: command tx timeout [ 294.223230][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.233652][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.256414][ T7110] bridge_slave_0: entered allmulticast mode [ 294.280077][ T7110] bridge_slave_0: entered promiscuous mode [ 294.297614][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.309162][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.339575][ T7110] bridge_slave_1: entered allmulticast mode [ 294.370929][ T7110] bridge_slave_1: entered promiscuous mode [ 294.391843][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.596653][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.659273][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.836782][ T6900] veth0_vlan: entered promiscuous mode [ 294.939247][ T7110] team0: Port device team_slave_0 added [ 294.963240][ T6900] veth1_vlan: entered promiscuous mode [ 294.992148][ T7110] team0: Port device team_slave_1 added [ 295.132971][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.146343][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.178029][ T29] audit: type=1400 audit(1727466884.310:612): avc: denied { create } for pid=7262 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 295.184296][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.235638][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.252983][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.310953][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.046966][ T29] audit: type=1400 audit(1727466884.440:613): avc: denied { setopt } for pid=7262 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.151461][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 296.205748][ T5233] Bluetooth: hci4: command tx timeout [ 296.305892][ T7110] hsr_slave_0: entered promiscuous mode [ 296.312604][ T7110] hsr_slave_1: entered promiscuous mode [ 296.321744][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.330270][ T7110] Cannot create hsr debugfs directory [ 297.116013][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 297.200799][ T6900] veth0_macvtap: entered promiscuous mode [ 297.211119][ T6900] veth1_macvtap: entered promiscuous mode [ 297.716305][ T7293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.326480][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.337155][ T29] audit: type=1400 audit(1727466886.970:614): avc: denied { read write } for pid=7283 comm="syz.0.322" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 298.337191][ T29] audit: type=1400 audit(1727466886.970:615): avc: denied { open } for pid=7283 comm="syz.0.322" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 298.401392][ T7293] tty tty20: ldisc open failed (-12), clearing slot 19 [ 298.448841][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.468060][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.482257][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.508224][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.546055][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.582830][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.614293][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.687156][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.698857][ T7302] ptrace attach of "./syz-executor exec"[5216] was attempted by "./syz-executor exec"[7302] [ 298.754967][ T29] audit: type=1400 audit(1727466887.880:616): avc: denied { name_bind } for pid=7301 comm="syz.1.324" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 298.792889][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.825762][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.845027][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.872971][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.883972][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.907086][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.932110][ T29] audit: type=1400 audit(1727466888.060:617): avc: denied { ioctl } for pid=7303 comm="syz.1.325" path="socket:[15966]" dev="sockfs" ino=15966 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.935066][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.020763][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.059623][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.076195][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.083480][ T7196] bridge_slave_0: entered allmulticast mode [ 299.096628][ T7196] bridge_slave_0: entered promiscuous mode [ 299.115105][ T6900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.125150][ T6900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.134163][ T6900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.143128][ T6900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.173010][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.188535][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.199642][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.221086][ T7196] bridge_slave_1: entered allmulticast mode [ 299.233242][ T7196] bridge_slave_1: entered promiscuous mode [ 299.290531][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.344989][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.454760][ T7196] team0: Port device team_slave_0 added [ 299.606989][ T7196] team0: Port device team_slave_1 added [ 300.628387][ T29] audit: type=1400 audit(1727466889.750:618): avc: denied { map } for pid=7312 comm="syz.0.327" path="socket:[16790]" dev="sockfs" ino=16790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.664549][ T29] audit: type=1400 audit(1727466889.750:619): avc: denied { read } for pid=7312 comm="syz.0.327" path="socket:[16790]" dev="sockfs" ino=16790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.704957][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 300.743273][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.771833][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.799221][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.643219][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.660931][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.723194][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.729715][ T7329] Non-string source [ 301.778127][ T7319] team0: Port device bridge1 added [ 301.794997][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 301.859105][ T12] bridge_slave_1: left allmulticast mode [ 301.864815][ T12] bridge_slave_1: left promiscuous mode [ 301.895739][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.932738][ T12] bridge_slave_0: left allmulticast mode [ 301.939046][ T12] bridge_slave_0: left promiscuous mode [ 301.945909][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.575302][ T7349] xt_CONNSECMARK: invalid mode: 0 [ 304.452398][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.638350][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.657218][ T12] bond0 (unregistering): Released all slaves [ 304.919496][ T2574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.300347][ T2574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.562152][ T29] audit: type=1400 audit(1727466895.690:620): avc: denied { create } for pid=7359 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.588945][ T7360] 9pnet_fd: Insufficient options for proto=fd [ 306.595167][ T29] audit: type=1400 audit(1727466895.720:621): avc: denied { getopt } for pid=7359 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.620484][ T29] audit: type=1400 audit(1727466895.750:622): avc: denied { bind } for pid=7359 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.655525][ T29] audit: type=1400 audit(1727466895.750:623): avc: denied { getopt } for pid=7359 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.680460][ T7196] hsr_slave_0: entered promiscuous mode [ 306.688508][ T7196] hsr_slave_1: entered promiscuous mode [ 306.694745][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.702887][ T7196] Cannot create hsr debugfs directory [ 306.735741][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.744355][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.788873][ T29] audit: type=1400 audit(1727466895.910:624): avc: denied { mounton } for pid=6900 comm="syz-executor" path="/root/syzkaller.yQm6BV/syz-tmp" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 306.855587][ T29] audit: type=1400 audit(1727466895.910:625): avc: denied { mount } for pid=6900 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.897532][ T29] audit: type=1400 audit(1727466895.910:626): avc: denied { mount } for pid=6900 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 307.057679][ T29] audit: type=1400 audit(1727466895.940:627): avc: denied { mounton } for pid=6900 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 307.080919][ T29] audit: type=1400 audit(1727466896.020:628): avc: denied { mount } for pid=7361 comm="syz.2.268" name="/" dev="ramfs" ino=16880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 307.812090][ T29] audit: type=1400 audit(1727466896.940:629): avc: denied { unmount } for pid=6900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 307.921878][ T7110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.930656][ T7110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.940695][ T7110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.389699][ T7110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.520741][ T12] hsr_slave_0: left promiscuous mode [ 308.542467][ T12] hsr_slave_1: left promiscuous mode [ 308.567798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.599389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.612003][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.619743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.676719][ T12] veth1_macvtap: left promiscuous mode [ 308.695603][ T12] veth0_macvtap: left promiscuous mode [ 308.701273][ T12] veth1_vlan: left promiscuous mode [ 308.736680][ T12] veth0_vlan: left promiscuous mode [ 308.907047][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 308.938328][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 309.140005][ T12] pimreg (unregistering): left allmulticast mode [ 310.186780][ T7399] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 310.195110][ T7399] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 310.333444][ T7399] Bluetooth: MGMT ver 1.23 [ 311.718233][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 312.226838][ T29] audit: type=1400 audit(1727466900.840:637): avc: denied { mounton } for pid=7403 comm="syz.0.340" path="/proc/449/task" dev="proc" ino=16998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 312.602859][ T29] audit: type=1400 audit(1727466901.730:638): avc: denied { connect } for pid=7401 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.134780][ T7427] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 314.277901][ T29] audit: type=1400 audit(1727466903.400:639): avc: denied { view } for pid=7425 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 314.825127][ T12] team0 (unregistering): Port device team_slave_1 removed [ 314.921128][ T12] team0 (unregistering): Port device team_slave_0 removed [ 316.788299][ T29] audit: type=1400 audit(1727466905.370:640): avc: denied { ioctl } for pid=7441 comm="syz.1.349" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 317.625975][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.745817][ T29] audit: type=1400 audit(1727466907.520:641): avc: denied { create } for pid=7468 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.765757][ T29] audit: type=1400 audit(1727466907.520:642): avc: denied { connect } for pid=7468 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.271001][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.491651][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.076190][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.083378][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.271638][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.278804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.454019][ T29] audit: type=1326 audit(1727466909.580:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 320.520777][ T29] audit: type=1326 audit(1727466909.610:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 320.578961][ T29] audit: type=1326 audit(1727466909.610:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 320.780518][ T29] audit: type=1326 audit(1727466909.610:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 320.804808][ T29] audit: type=1326 audit(1727466909.610:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 321.593719][ T29] audit: type=1326 audit(1727466909.610:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 321.715658][ T29] audit: type=1326 audit(1727466909.610:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 321.811534][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.875766][ T29] audit: type=1326 audit(1727466909.610:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 321.915211][ T7196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.925917][ T1173] libceph: connect (1)[c::]:6789 error -101 [ 321.932646][ T1173] libceph: mon0 (1)[c::]:6789 connect error [ 321.978627][ T7196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.988724][ T7196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.081681][ T7510] ceph: No mds server is up or the cluster is laggy [ 322.198523][ T7521] binder: 7513:7521 ioctl 40046205 9999999999999999 returned -22 [ 322.898401][ T46] libceph: connect (1)[c::]:6789 error -101 [ 322.904495][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 322.948933][ T7196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.015871][ T29] audit: type=1326 audit(1727466909.620:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.169632][ T29] audit: type=1326 audit(1727466909.620:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.311708][ T29] audit: type=1326 audit(1727466909.640:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.453161][ T29] audit: type=1326 audit(1727466909.640:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.521847][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.563531][ T29] audit: type=1326 audit(1727466909.640:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.647073][ T29] audit: type=1326 audit(1727466909.650:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fab2c37df39 code=0x7ffc0000 [ 323.691181][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.888479][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.895644][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.055553][ T29] audit: type=1326 audit(1727466909.650:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.2.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab2c37df39 code=0x0 [ 324.116152][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.122276][ T29] audit: type=1400 audit(1727466912.510:658): avc: denied { getopt } for pid=7522 comm="syz.2.359" laddr=::ffff:172.20.20.10 lport=68 faddr=::ffff:172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.123303][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.489602][ T7110] veth0_vlan: entered promiscuous mode [ 324.541562][ T7110] veth1_vlan: entered promiscuous mode [ 327.740208][ T29] audit: type=1400 audit(1727466914.920:659): avc: denied { module_request } for pid=7196 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 328.074877][ T29] audit: type=1400 audit(1727466917.070:660): avc: denied { read write } for pid=6900 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.104414][ T29] audit: type=1400 audit(1727466917.070:661): avc: denied { open } for pid=6900 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.128703][ T29] audit: type=1400 audit(1727466917.070:662): avc: denied { ioctl } for pid=6900 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.156038][ T7552] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 328.515688][ T29] audit: type=1400 audit(1727466917.130:663): avc: denied { search } for pid=7546 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.555822][ T29] audit: type=1400 audit(1727466917.130:664): avc: denied { read } for pid=7546 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.560028][ T7110] veth0_macvtap: entered promiscuous mode [ 328.583559][ T29] audit: type=1400 audit(1727466917.130:665): avc: denied { open } for pid=7546 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.602859][ T7110] veth1_macvtap: entered promiscuous mode [ 328.683970][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.855570][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.858065][ T29] audit: type=1400 audit(1727466917.130:666): avc: denied { getattr } for pid=7546 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.874321][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.895986][ T29] audit: type=1400 audit(1727466917.680:667): avc: denied { sys_module } for pid=7196 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 328.898998][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.896055][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.145523][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.414194][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.424116][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.437685][ T29] audit: type=1400 audit(1727466917.680:668): avc: denied { read } for pid=4656 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 331.465531][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.481936][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.675486][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.694894][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.728808][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.743635][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.718067][ T7110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.806190][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 332.806209][ T29] audit: type=1400 audit(1727466921.940:695): avc: denied { read } for pid=7569 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.812470][ T7110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.849904][ T7110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.858819][ T7110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.909835][ T29] audit: type=1400 audit(1727466921.940:696): avc: denied { open } for pid=7569 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.935331][ T29] audit: type=1400 audit(1727466921.940:697): avc: denied { getattr } for pid=7569 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.960996][ T29] audit: type=1400 audit(1727466921.930:694): avc: denied { mounton } for pid=7570 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 332.985295][ T29] audit: type=1400 audit(1727466921.970:698): avc: denied { mount } for pid=7570 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 333.008219][ T29] audit: type=1400 audit(1727466921.970:699): avc: denied { create } for pid=7570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.028611][ T29] audit: type=1400 audit(1727466921.980:700): avc: denied { read write } for pid=7570 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 333.052901][ T29] audit: type=1400 audit(1727466921.980:701): avc: denied { open } for pid=7570 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 333.077002][ T29] audit: type=1400 audit(1727466922.000:702): avc: denied { ioctl } for pid=7570 comm="syz-executor" path="socket:[18450]" dev="sockfs" ino=18450 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.225252][ T5429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.233387][ T5429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.359637][ T29] audit: type=1400 audit(1727466922.330:703): avc: denied { create } for pid=7110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.011753][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.038006][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.047284][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.063330][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.077176][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.084746][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.227368][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.251324][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.296228][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.602881][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 334.702529][ T7600] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 335.371385][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 335.476163][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 335.489884][ T7196] veth0_vlan: entered promiscuous mode [ 335.512127][ T7196] veth1_vlan: entered promiscuous mode [ 336.177462][ T5233] Bluetooth: hci5: command tx timeout [ 336.511688][ T7196] veth0_macvtap: entered promiscuous mode [ 336.587125][ T7196] veth1_macvtap: entered promiscuous mode [ 336.667701][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.688877][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.721807][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.746794][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.782149][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.833613][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.865042][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.895013][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.992635][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.125131][ T5233] Bluetooth: hci5: command tx timeout [ 339.165559][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 339.165583][ T29] audit: type=1400 audit(1727466926.500:739): avc: denied { create } for pid=7618 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 339.344841][ T29] audit: type=1400 audit(1727466926.500:740): avc: denied { bind } for pid=7618 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 339.364521][ T29] audit: type=1400 audit(1727466926.510:741): avc: denied { name_bind } for pid=7618 comm="syz.4.371" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 339.386472][ T29] audit: type=1400 audit(1727466926.510:742): avc: denied { node_bind } for pid=7618 comm="syz.4.371" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 339.429615][ T29] audit: type=1400 audit(1727466926.510:743): avc: denied { listen } for pid=7618 comm="syz.4.371" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 339.607426][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.617943][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.627870][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.637131][ T29] audit: type=1400 audit(1727466926.510:744): avc: denied { connect } for pid=7618 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 339.638336][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.668044][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.679486][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.690041][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.700725][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.717785][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.768511][ T7633] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 339.783907][ T7633] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 339.794237][ T7633] EXT4-fs warning (device sda1): ext4_resize_fs:2017: can't read last block, resize aborted [ 340.428278][ T7570] chnl_net:caif_netlink_parms(): no params data found [ 340.459671][ T29] audit: type=1400 audit(1727466926.510:745): avc: denied { name_connect } for pid=7618 comm="syz.4.371" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 340.578273][ T29] audit: type=1400 audit(1727466926.510:746): avc: denied { accept } for pid=7618 comm="syz.4.371" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 340.633146][ T29] audit: type=1400 audit(1727466926.510:747): avc: denied { write } for pid=7618 comm="syz.4.371" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=34122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 340.658968][ T29] audit: type=1400 audit(1727466928.870:748): avc: denied { mounton } for pid=7629 comm="syz.4.373" path="/proc/16/task" dev="proc" ino=18774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 340.712125][ T5402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.744292][ T7196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.765498][ T7196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.787232][ T7196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.803568][ T7196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.992740][ T5402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.405530][ T5233] Bluetooth: hci5: command tx timeout [ 342.414155][ T5402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.664755][ T5402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.945655][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.953086][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.969003][ T7570] bridge_slave_0: entered allmulticast mode [ 342.976879][ T7570] bridge_slave_0: entered promiscuous mode [ 342.986365][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.993680][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.002203][ T7570] bridge_slave_1: entered allmulticast mode [ 343.009816][ T7570] bridge_slave_1: entered promiscuous mode [ 343.128038][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.182166][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.222274][ T7676] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 343.278854][ T7570] team0: Port device team_slave_0 added [ 343.309376][ T5414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.335012][ T7570] team0: Port device team_slave_1 added [ 343.340423][ T5414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.445614][ T5233] Bluetooth: hci5: command tx timeout [ 343.582185][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.589479][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.638242][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.797077][ T5402] bridge_slave_1: left allmulticast mode [ 343.864798][ T5402] bridge_slave_1: left promiscuous mode [ 343.873211][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.891781][ T5402] bridge_slave_0: left allmulticast mode [ 343.901551][ T5402] bridge_slave_0: left promiscuous mode [ 343.921125][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.603967][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 344.603980][ T29] audit: type=1400 audit(1727466933.730:770): avc: denied { validate_trans } for pid=7679 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 345.006297][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 345.161981][ T5402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.166582][ T5402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.188486][ T5402] bond0 (unregistering): Released all slaves [ 345.210014][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.210035][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.210066][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.220828][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.221008][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.221049][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.221084][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 345.221111][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.221153][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.221182][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.228511][ T46] usb 1-1: config 0 descriptor?? [ 345.246871][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.453918][ T7570] hsr_slave_0: entered promiscuous mode [ 345.455110][ T7570] hsr_slave_1: entered promiscuous mode [ 345.774727][ T46] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 345.779266][ T46] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 346.487812][ T29] audit: type=1400 audit(1727466935.020:771): avc: denied { read write } for pid=7688 comm="syz.3.311" name="video0" dev="devtmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 346.487872][ T29] audit: type=1400 audit(1727466935.020:772): avc: denied { open } for pid=7688 comm="syz.3.311" path="/dev/video0" dev="devtmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 346.487914][ T29] audit: type=1400 audit(1727466935.050:773): avc: denied { ioctl } for pid=7688 comm="syz.3.311" path="/dev/video0" dev="devtmpfs" ino=845 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 346.559978][ T46] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 346.573096][ T29] audit: type=1326 audit(1727466935.700:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7690 comm="syz.4.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd11b97df39 code=0x0 [ 346.702775][ T29] audit: type=1400 audit(1727466935.780:775): avc: denied { read } for pid=7683 comm="syz.0.382" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 346.806295][ T29] audit: type=1400 audit(1727466935.830:776): avc: denied { open } for pid=7683 comm="syz.0.382" path="/dev/sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 347.793693][ T29] audit: type=1400 audit(1727466936.170:777): avc: denied { bind } for pid=7704 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.793529][ T8] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 348.823076][ T29] audit: type=1400 audit(1727466937.270:778): avc: denied { create } for pid=7712 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.843901][ T29] audit: type=1400 audit(1727466937.270:779): avc: denied { getopt } for pid=7712 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.046459][ T7724] ubi0: attaching mtd0 [ 349.053810][ T7724] ubi0: scanning is finished [ 349.086939][ T7724] ubi0: empty MTD device detected [ 351.490390][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 351.490410][ T29] audit: type=1400 audit(1727466939.940:785): avc: denied { read } for pid=7723 comm="syz.2.387" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 351.560971][ T5272] usb 1-1: USB disconnect, device number 3 [ 351.587544][ T29] audit: type=1400 audit(1727466939.940:786): avc: denied { open } for pid=7723 comm="syz.2.387" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 351.619353][ T29] audit: type=1400 audit(1727466940.620:787): avc: denied { create } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.643648][ T29] audit: type=1400 audit(1727466940.670:788): avc: denied { read write } for pid=7741 comm="syz.0.392" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.674149][ T29] audit: type=1400 audit(1727466940.670:789): avc: denied { open } for pid=7741 comm="syz.0.392" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.726205][ T29] audit: type=1400 audit(1727466940.670:790): avc: denied { connect } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.755314][ T7724] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 351.772987][ T7724] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 351.811062][ T7724] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 351.820311][ T7724] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 351.830301][ T7724] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 351.839410][ T7724] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 351.848002][ T7724] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1545959655 [ 351.860847][ T7724] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 351.873309][ T7728] ubi0: detaching mtd0 [ 351.881630][ T7746] ubi0: background thread "ubi_bgt0d" started, PID 7746 [ 351.898253][ T7749] ptrace attach of "./syz-executor exec"[5218] was attempted by " [ 351.904719][ T29] audit: type=1400 audit(1727466940.670:791): avc: denied { create } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.260945][ T7728] ubi0: mtd0 is detached [ 352.271419][ T29] audit: type=1400 audit(1727466940.750:792): avc: denied { setopt } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.312675][ T7736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.312907][ T29] audit: type=1400 audit(1727466940.760:793): avc: denied { setopt } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.360459][ T29] audit: type=1400 audit(1727466940.760:794): avc: denied { bind } for pid=7738 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.390492][ T7736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.397630][ T7736] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 352.467976][ T7755] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 352.509252][ T7736] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 352.579184][ T7736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.585249][ T5402] hsr_slave_0: left promiscuous mode [ 352.599088][ T7736] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 352.615118][ T5402] hsr_slave_1: left promiscuous mode [ 352.746023][ T7736] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 352.754248][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.765735][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.782929][ T7736] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 352.790294][ T7736] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 352.814189][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.822359][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.872069][ T7736] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 352.921829][ T5402] veth1_macvtap: left promiscuous mode [ 352.930033][ T5402] veth0_macvtap: left promiscuous mode [ 352.936136][ T5402] veth1_vlan: left promiscuous mode [ 352.941458][ T5402] veth0_vlan: left promiscuous mode [ 353.551663][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 353.893958][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 353.931821][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 353.977044][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.007028][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.043197][ T7773] [U]  [ 354.070569][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.096230][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.171692][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 354.179413][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.209090][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.257066][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.294503][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.301029][ T7774] Process accounting resumed [ 354.325816][ T5233] Bluetooth: hci3: command 0x0419 tx timeout [ 354.385267][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 354.393191][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.404865][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.416893][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.428698][ T5233] Bluetooth: hci1: command 0x0405 tx timeout [ 354.434845][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 354.459537][ T8] usb 4-1: string descriptor 0 read error: -22 [ 354.466139][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 354.543730][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.647914][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout [ 354.868171][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 355.436142][ T8] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 356.089624][ T46] usb 4-1: USB disconnect, device number 4 [ 356.106081][ T7806] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 356.380521][ T7814] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 356.388347][ T7814] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.403'. [ 356.397869][ T7814] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 356.927113][ T5233] Bluetooth: hci1: command 0x0405 tx timeout [ 356.943956][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.948504][ T7815] overlayfs: failed to resolve './file0': -2 [ 356.950246][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 357.455977][ T7805] orangefs_mount: mount request failed with -4 [ 358.979446][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 359.124819][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout [ 359.131481][ T5230] Bluetooth: hci5: command 0x0c1a tx timeout [ 359.348356][ T5402] team0 (unregistering): Port device team_slave_1 removed [ 359.534563][ T5402] team0 (unregistering): Port device team_slave_0 removed [ 359.764979][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 359.764996][ T29] audit: type=1400 audit(1727466948.870:814): avc: denied { append } for pid=7822 comm="syz.2.407" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.861290][ T7842] binder: 7838:7842 ioctl 40046205 9999999999999999 returned -22 [ 360.594351][ T29] audit: type=1400 audit(1727466948.980:815): avc: denied { read } for pid=7838 comm="syz.3.410" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.653789][ T29] audit: type=1400 audit(1727466948.980:816): avc: denied { open } for pid=7838 comm="syz.3.410" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.677994][ T29] audit: type=1400 audit(1727466948.990:817): avc: denied { ioctl } for pid=7838 comm="syz.3.410" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.703477][ T29] audit: type=1400 audit(1727466949.030:818): avc: denied { ioctl } for pid=7838 comm="syz.3.410" path="/dev/uinput" dev="devtmpfs" ino=835 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 360.985614][ T29] audit: type=1400 audit(1727466950.110:819): avc: denied { ioctl } for pid=7843 comm="syz.3.411" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19251 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.854390][ T29] audit: type=1400 audit(1727466951.980:820): avc: denied { read } for pid=7850 comm="syz.3.413" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.049674][ T29] audit: type=1400 audit(1727466951.980:821): avc: denied { open } for pid=7850 comm="syz.3.413" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.216115][ T29] audit: type=1400 audit(1727466952.310:822): avc: denied { ioctl } for pid=7850 comm="syz.3.413" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.137654][ T7860] xt_CONNSECMARK: invalid mode: 0 [ 365.445374][ T29] audit: type=1400 audit(1727466954.570:823): avc: denied { sqpoll } for pid=7863 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.425178][ T29] audit: type=1400 audit(1727466956.366:824): avc: denied { mount } for pid=7888 comm="syz.0.420" name="/" dev="pstore" ino=3288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 368.068648][ T7902] IPVS: Error joining to the multicast group [ 368.077656][ T29] audit: type=1400 audit(1727466956.376:825): avc: denied { mount } for pid=7888 comm="syz.0.420" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 368.101809][ T29] audit: type=1326 audit(1727466956.956:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.127931][ T29] audit: type=1326 audit(1727466956.956:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.151718][ T29] audit: type=1326 audit(1727466956.956:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.175316][ T29] audit: type=1326 audit(1727466956.956:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.198572][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.205005][ T29] audit: type=1326 audit(1727466956.956:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.228406][ T29] audit: type=1326 audit(1727466956.956:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.251600][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.258305][ T29] audit: type=1326 audit(1727466956.956:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7357df39 code=0x7fc00000 [ 368.429821][ T7908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7908 comm=syz.4.422 [ 368.674785][ T7570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.749517][ T7570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.568482][ T7570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.635969][ T7570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.579491][ T7919] overlayfs: missing 'lowerdir' [ 370.781194][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.798981][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.814729][ T7936] bridge0: entered allmulticast mode [ 370.847474][ T7936] pimreg: entered allmulticast mode [ 371.070107][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.077280][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.313609][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.320767][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.139200][ T7936] pimreg: left allmulticast mode [ 372.144468][ T7936] bridge0: left allmulticast mode [ 372.232705][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 372.232752][ T29] audit: type=1400 audit(1727466960.870:844): avc: denied { create } for pid=7946 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.829384][ T7950] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 373.220384][ T29] audit: type=1400 audit(1727466961.853:845): avc: denied { read } for pid=7967 comm="syz.0.433" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.527625][ T7977] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 374.548216][ T29] audit: type=1400 audit(1727466961.891:846): avc: denied { open } for pid=7967 comm="syz.0.433" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 374.577688][ T29] audit: type=1400 audit(1727466961.900:847): avc: denied { ioctl } for pid=7967 comm="syz.0.433" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 375.705767][ T29] audit: type=1400 audit(1727466964.166:848): avc: denied { ioctl } for pid=7963 comm="syz.2.432" path="socket:[19813]" dev="sockfs" ino=19813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.732058][ T29] audit: type=1400 audit(1727466964.166:849): avc: denied { bind } for pid=7963 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.622152][ T29] audit: type=1400 audit(1727466965.430:850): avc: denied { mount } for pid=7980 comm="syz.3.435" name="/" dev="autofs" ino=20516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 377.693229][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 377.702212][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 377.751286][ T29] audit: type=1400 audit(1727466966.086:851): avc: denied { unmount } for pid=7196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 377.793901][ T29] audit: type=1400 audit(1727466966.095:852): avc: denied { bind } for pid=7999 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.813400][ T29] audit: type=1400 audit(1727466966.095:853): avc: denied { name_bind } for pid=7999 comm="syz.0.437" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 377.837391][ T29] audit: type=1400 audit(1727466966.095:854): avc: denied { node_bind } for pid=7999 comm="syz.0.437" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 377.838263][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.205899][ T7570] veth0_vlan: entered promiscuous mode [ 378.255792][ T7570] veth1_vlan: entered promiscuous mode [ 378.296021][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 378.795784][ T29] audit: type=1400 audit(1727466967.078:855): avc: denied { write } for pid=8007 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 378.888490][ T7570] veth0_macvtap: entered promiscuous mode [ 378.913694][ T7570] veth1_macvtap: entered promiscuous mode [ 379.025630][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.058744][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.078921][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.095501][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.343442][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.356504][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.366454][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.376932][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.388309][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.230879][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.897750][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.916184][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.926060][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.936616][ T29] audit: type=1400 audit(1727466969.354:856): avc: denied { create } for pid=8041 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.956274][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.966184][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.976084][ T29] audit: type=1400 audit(1727466969.372:857): avc: denied { read } for pid=8041 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.976744][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.006007][ T7570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.026702][ T7570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.129788][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.144259][ T7570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.153459][ T7570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.162566][ T7570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.171283][ T7570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.569391][ T29] audit: type=1400 audit(1727466970.383:858): avc: denied { write } for pid=8048 comm="syz.4.443" name="fd" dev="proc" ino=20068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 383.365386][ T5402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.390725][ T5402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.415972][ T29] audit: type=1400 audit(1727466970.412:859): avc: denied { add_name } for pid=8048 comm="syz.4.443" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 383.437594][ T29] audit: type=1400 audit(1727466970.599:860): avc: denied { create } for pid=8048 comm="syz.4.443" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 383.459108][ T29] audit: type=1400 audit(1727466970.599:861): avc: denied { associate } for pid=8048 comm="syz.4.443" name="blkio.bfq.io_serviced" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 383.481666][ T29] audit: type=1400 audit(1727466970.674:862): avc: denied { ioctl } for pid=8050 comm="syz.3.444" path="socket:[20552]" dev="sockfs" ino=20552 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.606870][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.630321][ T29] audit: type=1400 audit(1727466971.601:863): avc: denied { write } for pid=8059 comm="syz.3.445" name="snmp" dev="proc" ino=4026533472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 383.675599][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.455339][ T29] audit: type=1400 audit(1727466972.322:864): avc: denied { ioctl } for pid=8062 comm="syz.2.446" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 385.016506][ T5230] Bluetooth: hci1: command 0x0405 tx timeout [ 386.025150][ T29] audit: type=1400 audit(1727466973.567:865): avc: denied { execute } for pid=8077 comm="syz.3.449" path="/22/blkio.bfq.time" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 386.603447][ T29] audit: type=1400 audit(1727466974.194:866): avc: denied { setopt } for pid=8093 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.603496][ T29] audit: type=1400 audit(1727466974.194:867): avc: denied { write } for pid=8093 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.164782][ T29] audit: type=1400 audit(1727466975.608:868): avc: denied { bind } for pid=8106 comm="syz.3.453" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 389.623680][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 390.428723][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 390.428741][ T29] audit: type=1400 audit(1727466977.209:871): avc: denied { accept } for pid=8118 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.644346][ T29] audit: type=1400 audit(1727466977.640:872): avc: denied { unlink } for pid=8134 comm="syz.3.459" name="#a" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 391.877442][ T29] audit: type=1400 audit(1727466978.586:873): avc: denied { ioctl } for pid=8148 comm="syz.3.461" path="/dev/usbmon7" dev="devtmpfs" ino=726 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 393.326588][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 393.579380][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 393.586742][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.641697][ T46] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 393.690272][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.741970][ T46] usb 4-1: config 0 descriptor?? [ 395.732735][ T29] audit: type=1400 audit(1727466982.940:874): avc: denied { ioctl } for pid=8166 comm="syz.4.465" path="socket:[20723]" dev="sockfs" ino=20723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.878693][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 395.884694][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 395.893967][ T46] usb 4-1: USB disconnect, device number 5 [ 396.995518][ T29] audit: type=1400 audit(1727466984.120:875): avc: denied { ioctl } for pid=8194 comm="syz.0.470" path="socket:[20734]" dev="sockfs" ino=20734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.088847][ T29] audit: type=1400 audit(1727466984.120:876): avc: denied { connect } for pid=8194 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.212979][ T29] audit: type=1400 audit(1727466984.120:877): avc: denied { write } for pid=8194 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.304318][ T29] audit: type=1400 audit(1727466984.204:878): avc: denied { getopt } for pid=8194 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 399.321896][ T8213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8213 comm=syz.0.474 [ 399.340774][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.356286][ T29] audit: type=1400 audit(1727466986.329:879): avc: denied { watch watch_reads } for pid=8211 comm="syz.0.474" path="/147/bus" dev="overlay" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 399.436561][ T29] audit: type=1400 audit(1727466986.357:880): avc: denied { read write } for pid=8211 comm="syz.0.474" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 399.512027][ T29] audit: type=1400 audit(1727466986.357:881): avc: denied { open } for pid=8211 comm="syz.0.474" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 399.563521][ T29] audit: type=1400 audit(1727466986.460:882): avc: denied { bind } for pid=8197 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 399.797725][ T8217] bridge0: port 3(syz_tun) entered disabled state [ 399.998114][ T8217] syz_tun (unregistering): left allmulticast mode [ 400.012407][ T8226] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 400.019588][ T8226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 400.030827][ T8226] vhci_hcd vhci_hcd.0: Device attached [ 400.039193][ T8217] syz_tun (unregistering): left promiscuous mode [ 400.134820][ T8217] bridge0: port 3(syz_tun) entered disabled state [ 400.307967][ T5271] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 400.443625][ T5412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.740821][ T5412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.097238][ T5412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.102172][ T29] audit: type=1400 audit(1727466987.958:883): avc: denied { create } for pid=8234 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 401.248120][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.293826][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.321697][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.340122][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.350281][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.364824][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.611067][ T5412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.353401][ T8227] vhci_hcd: connection reset by peer [ 402.385960][ T2574] vhci_hcd: stop threads [ 402.401373][ T2574] vhci_hcd: release socket [ 402.473848][ T2574] vhci_hcd: disconnect device [ 402.598504][ T5412] bridge_slave_1: left allmulticast mode [ 402.613583][ T5412] bridge_slave_1: left promiscuous mode [ 402.633981][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.650292][ T5412] bridge_slave_0: left allmulticast mode [ 402.656313][ T5412] bridge_slave_0: left promiscuous mode [ 402.666780][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.986206][ T29] audit: type=1400 audit(1727466989.728:884): avc: denied { read } for pid=8238 comm="syz.3.483" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 403.071276][ T29] audit: type=1400 audit(1727466989.728:885): avc: denied { open } for pid=8238 comm="syz.3.483" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 403.120370][ T29] audit: type=1400 audit(1727466989.756:886): avc: denied { ioctl } for pid=8238 comm="syz.3.483" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 403.578022][ T5233] Bluetooth: hci0: command tx timeout [ 406.585047][ T5271] vhci_hcd: vhci_device speed not set [ 406.597250][ T5233] Bluetooth: hci0: command tx timeout [ 406.709348][ T5412] team0: Port device bridge1 removed [ 407.400910][ T29] audit: type=1400 audit(1727466993.455:887): avc: denied { setopt } for pid=8282 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.479549][ T29] audit: type=1400 audit(1727466993.464:888): avc: denied { connect } for pid=8282 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.511001][ T29] audit: type=1400 audit(1727466993.913:889): avc: denied { create } for pid=8297 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 408.758202][ T5233] Bluetooth: hci0: command tx timeout [ 410.208172][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.228634][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.244339][ T5412] bond0 (unregistering): Released all slaves [ 410.257863][ T5412] bond1 (unregistering): Released all slaves [ 410.984186][ T5233] Bluetooth: hci0: command tx timeout [ 411.307659][ T29] audit: type=1400 audit(1727466996.891:890): avc: denied { getopt } for pid=8310 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.586643][ T8323] program syz.4.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.613458][ T29] audit: type=1400 audit(1727466997.771:891): avc: denied { write } for pid=8316 comm="syz.4.497" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 411.718513][ T8323] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 411.744740][ T29] audit: type=1400 audit(1727466997.790:892): avc: denied { ioctl } for pid=8316 comm="syz.4.497" path="/dev/sg0" dev="devtmpfs" ino=693 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 411.856288][ T29] audit: type=1400 audit(1727466997.911:893): avc: denied { setopt } for pid=8316 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 412.045973][ T29] audit: type=1400 audit(1727466998.117:894): avc: denied { create } for pid=8324 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 412.120155][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 412.193336][ T5412] hsr_slave_0: left promiscuous mode [ 412.227995][ T5412] hsr_slave_1: left promiscuous mode [ 412.246214][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.272562][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.328625][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.350656][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.445712][ T5412] veth1_macvtap: left promiscuous mode [ 412.462354][ T5412] veth0_macvtap: left promiscuous mode [ 412.468227][ T5412] veth1_vlan: left promiscuous mode [ 412.495560][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 412.495622][ T5233] Bluetooth: hci1: Malformed LE Event: 0x0d [ 412.919127][ T29] audit: type=1400 audit(1727466999.026:895): avc: denied { map } for pid=8347 comm="syz.3.502" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 412.962456][ T29] audit: type=1400 audit(1727466999.026:896): avc: denied { execute } for pid=8347 comm="syz.3.502" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.015795][ T29] audit: type=1400 audit(1727466999.119:897): avc: denied { ioctl } for pid=8347 comm="syz.3.502" path="/dev/nullb0" dev="devtmpfs" ino=680 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.078738][ T29] audit: type=1400 audit(1727466999.175:898): avc: denied { listen } for pid=8347 comm="syz.3.502" lport=39421 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.872324][ T8358] Unsupported ieee802154 address type: 0 [ 413.910870][ T29] audit: type=1400 audit(1727466999.924:899): avc: denied { bind } for pid=8355 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 414.872922][ T8370] ip6t_REJECT: ECHOREPLY is not supported [ 415.545093][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.599016][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 415.680206][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 417.187455][ T29] audit: type=1400 audit(1727467003.024:900): avc: denied { bind } for pid=8378 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 419.050223][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.057483][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.149327][ T8233] bridge_slave_0: entered allmulticast mode [ 419.230654][ T8233] bridge_slave_0: entered promiscuous mode [ 419.293201][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.348855][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.366222][ T8233] bridge_slave_1: entered allmulticast mode [ 419.373586][ T8233] bridge_slave_1: entered promiscuous mode [ 420.552050][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.589097][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.871608][ T8233] team0: Port device team_slave_0 added [ 420.911113][ T8233] team0: Port device team_slave_1 added [ 420.951755][ T29] audit: type=1400 audit(1727467006.535:901): avc: denied { read } for pid=8420 comm="syz.2.516" path="socket:[21010]" dev="sockfs" ino=21010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.988097][ T29] audit: type=1400 audit(1727467006.544:902): avc: denied { read } for pid=8420 comm="syz.2.516" path="socket:[21009]" dev="sockfs" ino=21009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.013066][ T8423] Bluetooth: MGMT ver 1.23 [ 421.067137][ T29] audit: type=1400 audit(1727467006.610:903): avc: denied { write } for pid=8420 comm="syz.2.516" path="socket:[21009]" dev="sockfs" ino=21009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.130020][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.182429][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.214009][ T29] audit: type=1400 audit(1727467006.797:904): avc: denied { write } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.403232][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.427369][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.085142][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.140286][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.261007][ T29] audit: type=1400 audit(1727467006.797:905): avc: denied { remove_name } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.309348][ T29] audit: type=1400 audit(1727467006.797:906): avc: denied { rename } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 422.337917][ T29] audit: type=1400 audit(1727467006.797:907): avc: denied { add_name } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.360572][ T29] audit: type=1400 audit(1727467006.797:908): avc: denied { unlink } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 422.384757][ T29] audit: type=1400 audit(1727467006.797:909): avc: denied { create } for pid=4656 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 422.538263][ T8438] binder: 8432:8438 ioctl c0306201 20000280 returned -11 [ 422.607252][ T8233] hsr_slave_0: entered promiscuous mode [ 422.620868][ T8233] hsr_slave_1: entered promiscuous mode [ 422.650204][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.693580][ T8233] Cannot create hsr debugfs directory [ 424.087651][ T8453] ax25_connect(): syz.2.522 uses autobind, please contact jreuter@yaina.de [ 424.662357][ T8452] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 424.743062][ T29] audit: type=1400 audit(1727467009.484:910): avc: denied { connect } for pid=8447 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 427.207558][ T29] audit: type=1400 audit(1727467012.405:911): avc: denied { create } for pid=8479 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.317323][ T8485] ebtables: ebtables: counters copy to user failed while replacing table [ 427.332850][ T29] audit: type=1400 audit(1727467012.405:912): avc: denied { accept } for pid=8479 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.453196][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 427.562719][ T8469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.564438][ T5271] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 427.581292][ T8469] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 427.613495][ T8469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.639074][ T8469] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 427.694019][ T8469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 427.732440][ T8469] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 427.769783][ T8233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.828276][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.863911][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.891283][ T5271] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.922922][ T8233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.931142][ T8469] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 427.958209][ T8469] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 427.964788][ T8233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.994015][ T5271] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 428.006182][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.049000][ T8233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.074308][ T5271] usb 4-1: config 0 descriptor?? [ 428.468087][ T8469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.493950][ T8469] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 428.544445][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.559905][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.588265][ T8233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.598720][ T8233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.617866][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.625035][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.634161][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.641299][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.692251][ T5271] pyra 0003:1E7D:2C24.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 428.802151][ T29] audit: type=1400 audit(1727467013.884:913): avc: denied { setopt } for pid=8500 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.647016][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.507587][ T8233] veth0_vlan: entered promiscuous mode [ 430.534708][ T8233] veth1_vlan: entered promiscuous mode [ 430.571844][ T8233] veth0_macvtap: entered promiscuous mode [ 430.589616][ T8233] veth1_macvtap: entered promiscuous mode [ 430.609033][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.625912][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.636604][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.696640][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.874819][ T8] usb 4-1: USB disconnect, device number 6 [ 431.141284][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.253634][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.634576][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.680823][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.851599][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.920638][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.935760][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.227538][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.250918][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.261945][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.273260][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.342751][ T8541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.881231][ T29] audit: type=1400 audit(1727467017.208:914): avc: denied { lock } for pid=8535 comm="syz.3.536" path="socket:[21379]" dev="sockfs" ino=21379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 432.929455][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.962959][ T8543] [ 432.965318][ T8543] ====================================================== [ 432.972323][ T8543] WARNING: possible circular locking dependency detected [ 432.979333][ T8543] 6.11.0-syzkaller-11624-ge477dba5442c #0 Not tainted [ 432.986075][ T8543] ------------------------------------------------------ [ 432.993088][ T8543] syz.4.535/8543 is trying to acquire lock: [ 432.998959][ T8543] ffff888050dc4aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 433.009664][ T8543] [ 433.009664][ T8543] but task is already holding lock: [ 433.017010][ T8543] ffff88801fb93118 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 433.027178][ T8543] [ 433.027178][ T8543] which lock already depends on the new lock. [ 433.027178][ T8543] [ 433.037566][ T8543] [ 433.037566][ T8543] the existing dependency chain (in reverse order) is: [ 433.046566][ T8543] [ 433.046566][ T8543] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 433.054116][ T8543] down_read_killable+0x9d/0x380 [ 433.059568][ T8543] lock_mm_and_find_vma+0x3a9/0x6a0 [ 433.065284][ T8543] do_user_addr_fault+0x2b5/0x13f0 [ 433.070928][ T8543] exc_page_fault+0x5c/0xc0 [ 433.075938][ T8543] asm_exc_page_fault+0x26/0x30 [ 433.081293][ T8543] fault_in_readable+0x126/0x230 [ 433.086744][ T8543] fault_in_iov_iter_readable+0x101/0x2c0 [ 433.092985][ T8543] generic_perform_write+0x21b/0x920 [ 433.098783][ T8543] shmem_file_write_iter+0x10e/0x140 [ 433.104611][ T8543] vfs_write+0x6b5/0x1140 [ 433.109466][ T8543] ksys_write+0x12f/0x260 [ 433.114310][ T8543] do_syscall_64+0xcd/0x250 [ 433.119320][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.125732][ T8543] [ 433.125732][ T8543] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 433.134408][ T8543] __lock_acquire+0x250b/0x3ce0 [ 433.139773][ T8543] lock_acquire+0x1b1/0x560 [ 433.144787][ T8543] down_write+0x93/0x200 [ 433.149552][ T8543] process_measurement+0x39c/0x2370 [ 433.155281][ T8543] ima_file_mmap+0x146/0x1d0 [ 433.160384][ T8543] security_mmap_file+0x8bd/0x990 [ 433.165943][ T8543] __do_sys_remap_file_pages+0x526/0x900 [ 433.172129][ T8543] do_syscall_64+0xcd/0x250 [ 433.177154][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.183573][ T8543] [ 433.183573][ T8543] other info that might help us debug this: [ 433.183573][ T8543] [ 433.193781][ T8543] Possible unsafe locking scenario: [ 433.193781][ T8543] [ 433.201216][ T8543] CPU0 CPU1 [ 433.206563][ T8543] ---- ---- [ 433.211907][ T8543] lock(&mm->mmap_lock); [ 433.216227][ T8543] lock(&sb->s_type->i_mutex_key#12); [ 433.224205][ T8543] lock(&mm->mmap_lock); [ 433.231054][ T8543] lock(&sb->s_type->i_mutex_key#12); [ 433.236510][ T8543] [ 433.236510][ T8543] *** DEADLOCK *** [ 433.236510][ T8543] [ 433.244635][ T8543] 1 lock held by syz.4.535/8543: [ 433.249584][ T8543] #0: ffff88801fb93118 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 433.260016][ T8543] [ 433.260016][ T8543] stack backtrace: [ 433.265885][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.4.535 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 433.276130][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.286181][ T8543] Call Trace: [ 433.289451][ T8543] [ 433.292370][ T8543] dump_stack_lvl+0x116/0x1f0 [ 433.297037][ T8543] print_circular_bug+0x419/0x5d0 [ 433.302058][ T8543] check_noncircular+0x31a/0x400 [ 433.307008][ T8543] ? __pfx_check_noncircular+0x10/0x10 [ 433.312458][ T8543] ? register_lock_class+0xb1/0x1240 [ 433.317736][ T8543] ? lockdep_lock+0xc6/0x200 [ 433.322335][ T8543] ? __pfx_lockdep_lock+0x10/0x10 [ 433.327347][ T8543] ? __lock_acquire+0x163e/0x3ce0 [ 433.332364][ T8543] __lock_acquire+0x250b/0x3ce0 [ 433.337208][ T8543] ? __pfx___lock_acquire+0x10/0x10 [ 433.342397][ T8543] ? hlock_class+0x4e/0x130 [ 433.346889][ T8543] lock_acquire+0x1b1/0x560 [ 433.351384][ T8543] ? process_measurement+0x39c/0x2370 [ 433.356740][ T8543] ? __pfx_lock_acquire+0x10/0x10 [ 433.361759][ T8543] ? __pfx_ima_match_policy+0x10/0x10 [ 433.367205][ T8543] ? __pfx___might_resched+0x10/0x10 [ 433.372473][ T8543] ? hlock_class+0x4e/0x130 [ 433.376964][ T8543] down_write+0x93/0x200 [ 433.381193][ T8543] ? process_measurement+0x39c/0x2370 [ 433.386565][ T8543] ? __pfx_down_write+0x10/0x10 [ 433.391422][ T8543] process_measurement+0x39c/0x2370 [ 433.396618][ T8543] ? __pfx_process_measurement+0x10/0x10 [ 433.402238][ T8543] ? avc_has_perm_noaudit+0x119/0x3a0 [ 433.407616][ T8543] ? __pfx_lock_release+0x10/0x10 [ 433.412649][ T8543] ? __pfx___lock_acquire+0x10/0x10 [ 433.417893][ T8543] ? file_map_prot_check+0x1eb/0x360 [ 433.423171][ T8543] ima_file_mmap+0x146/0x1d0 [ 433.427752][ T8543] ? __pfx_ima_file_mmap+0x10/0x10 [ 433.432849][ T8543] ? __pfx_down_write_killable+0x10/0x10 [ 433.438477][ T8543] security_mmap_file+0x8bd/0x990 [ 433.443490][ T8543] __do_sys_remap_file_pages+0x526/0x900 [ 433.449115][ T8543] ? __pfx_do_futex+0x10/0x10 [ 433.453780][ T8543] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 433.459920][ T8543] ? __x64_sys_futex+0x1e1/0x4c0 [ 433.464844][ T8543] ? xfd_validate_state+0x5d/0x180 [ 433.469952][ T8543] do_syscall_64+0xcd/0x250 [ 433.474445][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.480333][ T8543] RIP: 0033:0x7fd11b97df39 [ 433.484743][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.504336][ T8543] RSP: 002b:00007fd11c6bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 433.512731][ T8543] RAX: ffffffffffffffda RBX: 00007fd11bb36130 RCX: 00007fd11b97df39 [ 433.520686][ T8543] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 433.528641][ T8543] RBP: 00007fd11b9f0216 R08: 0000000000000000 R09: 0000000000000000 [ 433.536598][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.544554][ T8543] R13: 0000000000000000 R14: 00007fd11bb36130 R15: 00007ffcd4ad8e58 [ 433.552513][ T8543] [ 433.556286][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.567150][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.575788][ T8233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.584504][ T8233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.593200][ T8233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.601891][ T8233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.671890][ T29] audit: type=1400 audit(1727467018.407:915): avc: denied { write } for pid=5206 comm="syz-executor" path="pipe:[3027]" dev="pipefs" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 433.723614][ T8543] program syz.4.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.147355][ T5414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.286422][ T5414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.446986][ T5414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.557263][ T5414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.687865][ T5414] bridge_slave_1: left allmulticast mode [ 434.694915][ T5414] bridge_slave_1: left promiscuous mode [ 434.710275][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.743504][ T5414] bridge_slave_0: left allmulticast mode [ 434.749163][ T5414] bridge_slave_0: left promiscuous mode [ 434.768205][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.057184][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.068340][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.082352][ T5414] bond0 (unregistering): Released all slaves [ 435.546601][ T5414] hsr_slave_0: left promiscuous mode [ 435.558460][ T5414] hsr_slave_1: left promiscuous mode [ 435.564636][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.572077][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.582237][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.589999][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.608895][ T5414] veth1_macvtap: left promiscuous mode [ 435.616675][ T5414] veth0_macvtap: left promiscuous mode [ 435.638756][ T5414] veth1_vlan: left promiscuous mode [ 435.649780][ T5414] veth0_vlan: left promiscuous mode [ 435.908710][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 435.941438][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 436.406861][ T5414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.455935][ T5414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.512416][ T5414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.553922][ T5414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.656955][ T5414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.714705][ T5414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.765297][ T5414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.830123][ T5414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.933304][ T5414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.968010][ T5414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.000650][ T5414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.044304][ T5414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.127338][ T5414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.191731][ T5414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.235830][ T5414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.290698][ T5414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.401606][ T5414] bridge_slave_1: left allmulticast mode [ 437.407309][ T5414] bridge_slave_1: left promiscuous mode [ 437.418111][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.426789][ T5414] bridge_slave_0: left allmulticast mode [ 437.432463][ T5414] bridge_slave_0: left promiscuous mode [ 437.440168][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.449702][ T5414] bridge_slave_1: left allmulticast mode [ 437.456875][ T5414] bridge_slave_1: left promiscuous mode [ 437.462569][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.472814][ T5414] bridge_slave_0: left allmulticast mode [ 437.480087][ T5414] bridge_slave_0: left promiscuous mode [ 437.486964][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.495981][ T5414] bridge_slave_1: left allmulticast mode [ 437.503522][ T5414] bridge_slave_1: left promiscuous mode [ 437.509441][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.517910][ T5414] bridge_slave_0: left allmulticast mode [ 437.526401][ T5414] bridge_slave_0: left promiscuous mode [ 437.533184][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.543916][ T5414] bridge_slave_1: left allmulticast mode [ 437.549594][ T5414] bridge_slave_1: left promiscuous mode [ 437.555777][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.565802][ T5414] bridge_slave_0: left allmulticast mode [ 437.571485][ T5414] bridge_slave_0: left promiscuous mode [ 437.577709][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.940028][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.950346][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.960146][ T5414] bond0 (unregistering): Released all slaves [ 437.972142][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.982575][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.992957][ T5414] bond0 (unregistering): Released all slaves [ 438.005840][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.016493][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.027431][ T5414] bond0 (unregistering): Released all slaves [ 438.038683][ T5414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.048510][ T5414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.058252][ T5414] bond0 (unregistering): Released all slaves [ 438.589778][ T5414] hsr_slave_0: left promiscuous mode [ 438.595621][ T5414] hsr_slave_1: left promiscuous mode [ 438.601872][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.611022][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.620628][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.628065][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.638252][ T5414] hsr_slave_0: left promiscuous mode [ 438.644105][ T5414] hsr_slave_1: left promiscuous mode [ 438.649932][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.657715][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.668667][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.676400][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.687552][ T5414] hsr_slave_0: left promiscuous mode [ 438.694664][ T5414] hsr_slave_1: left promiscuous mode [ 438.700748][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.708360][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.717680][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.725120][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.738159][ T5414] hsr_slave_0: left promiscuous mode [ 438.743993][ T5414] hsr_slave_1: left promiscuous mode [ 438.750270][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.759388][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.767104][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.775435][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.790844][ T5414] veth1_macvtap: left promiscuous mode [ 438.796391][ T5414] veth0_macvtap: left promiscuous mode [ 438.803711][ T5414] veth1_vlan: left promiscuous mode [ 438.809112][ T5414] veth0_vlan: left promiscuous mode [ 438.815445][ T5414] veth1_macvtap: left promiscuous mode [ 438.820977][ T5414] veth0_macvtap: left promiscuous mode [ 438.826997][ T5414] veth1_vlan: left promiscuous mode [ 438.832530][ T5414] veth0_vlan: left promiscuous mode [ 438.838362][ T5414] veth1_macvtap: left promiscuous mode [ 438.844056][ T5414] veth0_macvtap: left promiscuous mode [ 438.849580][ T5414] veth1_vlan: left promiscuous mode [ 438.854879][ T5414] veth0_vlan: left promiscuous mode [ 438.860786][ T5414] veth1_macvtap: left promiscuous mode [ 438.866366][ T5414] veth0_macvtap: left promiscuous mode [ 438.871895][ T5414] veth1_vlan: left promiscuous mode [ 438.877285][ T5414] veth0_vlan: left promiscuous mode [ 439.129189][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 439.160343][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 439.297305][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 439.332585][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 439.518893][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 439.549599][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 439.675693][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 439.704736][ T5414] team0 (unregistering): Port device team_slave_0 removed