last executing test programs: 1m59.638543402s ago: executing program 0 (id=849): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) inotify_init1(0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@deltaction={0x34, 0x31, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8011) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) 1m58.359784403s ago: executing program 0 (id=852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r12, @ANYBLOB="887b231fce"], 0x28}}, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r13, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000000)=""/7, 0x7) 1m55.508027071s ago: executing program 0 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x20014000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000a40)=""/102368, 0x18fe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x30, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000052000000a5000000b708000000001b2e7b8af8ff00000015aa12557a68fab7a4b68597b50d0b9a00b7080000e0ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400008000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x6, 0x8, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') 1m11.460632846s ago: executing program 1 (id=897): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new def'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 1m9.714345876s ago: executing program 1 (id=899): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000480)=0x400000) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000002080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x150}}, 0x0) write$binfmt_aout(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x212) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000040)=0x9, 0x4) tgkill(r2, r2, 0x38) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$nullb(0xffffff9c, &(0x7f00000004c0), 0x10080, 0x0) socket(0x2b, 0x2, 0xffffffff) socket$nl_audit(0x10, 0x3, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 49.514166252s ago: executing program 0 (id=865): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000440)="f3f3640f8700000100e35736660f38819a298e0000c4e12def9abe0000009a003000002f00670fe3f436650ff4f30f017e06b82d1f24dd0f23d00f21f835200000060f23f80fc71e", 0x48}], 0x1, 0x41, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) chdir(&(0x7f00000000c0)='./bus\x00') r5 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r5, 0x0) 49.512677955s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000700)=@req={0x10000, 0x5, 0x80, 0xa00}, 0x10) sendmmsg(r3, &(0x7f0000004ac0)=[{{&(0x7f0000009100)=@caif=@dgm={0x25, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000003c80)=ANY=[], 0x10}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xb, 0x0, 0xff, 0x6, 0x5, 0xf}, &(0x7f00000000c0)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x0) 46.028073743s ago: executing program 0 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) 46.027089865s ago: executing program 1 (id=902): r0 = memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2G\x00\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x200000000000011, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000567000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x34, r5, 0x31d, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000100000000dd000000c317c400"], &(0x7f0000001480)='syzkaller\x00', 0x9, 0xab, &(0x7f0000000380)=""/171, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) syz_clone3(&(0x7f0000000580)={0x102000000, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x3f}, &(0x7f0000000300)=""/43, 0x2b, &(0x7f00000004c0)=""/179, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r2}}, 0x58) read$FUSE(r2, 0x0, 0x0) 40.629759543s ago: executing program 1 (id=906): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 37.687876506s ago: executing program 1 (id=918): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) chmod(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 25.675800696s ago: executing program 0 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0x25, 0x2, 0x24) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd_index=0x9, 0x10, {0x0, r4}, 0x81, 0xe, 0x0, {0x0, r7, r4}}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xf0580, 0x0) lstat(0x0, &(0x7f00000003c0)) io_uring_enter(r4, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 24.627574567s ago: executing program 2 (id=923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80d2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) socket(0x10, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$userns(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000140)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 21.976672309s ago: executing program 2 (id=928): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(0xffffffffffffffff, 0x1) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080), 0x0) close(r5) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c000904"], 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) socket$inet6(0xa, 0x2, 0x0) 17.645466285s ago: executing program 2 (id=932): r0 = socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getregs(0xc, r4, 0xfffffffffffffffc, &(0x7f0000002700)=""/4096) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) r5 = io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xdbbe, 0x400, 0x1, 0x25}) io_uring_setup(0x19ad, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=[@tclass={{0x14}}], 0x18}}, {{&(0x7f0000002180)={0xa, 0x0, 0x0, @private0, 0x6760}, 0x1c, 0x0}}], 0x2, 0x0) 16.504660371s ago: executing program 2 (id=933): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000480)=0x400000) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000002080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x150}}, 0x0) write$binfmt_aout(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x212) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000040)=0x9, 0x4) tgkill(r2, r2, 0x38) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$nullb(0xffffff9c, &(0x7f00000004c0), 0x10080, 0x0) socket(0x2b, 0x2, 0xffffffff) socket$nl_audit(0x10, 0x3, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 14.16504942s ago: executing program 2 (id=943): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) personality(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0a00, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10d942, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000080)='\x00\x00', 0x2}]) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000680)={r7, 0x4559, {0x0, 0x0, 0x0, 0x2, 0xfffffffeffffffff, 0x0, 0x6, 0x0, 0x4, "bdaab75a7b9113327c1409d6577330aac2e5dad4d29e23f806105874953aab4fe3c7d54171cf8555ae62efd2318b1ce045f19bc72fdce12b82203d571eb693df", "0ab9b9942f3bb8e258357ae26dd7fd6f3b7d1f7b52be9c16c1825a98aa76fc031b6c4683dd704656a5fffff8da312c9712ce2bc9fe14886c7940decee3fed1ee", "19da0d472cf9b5da868b15f4c761b816b00bfb90b27bfb9720509a0488a558bc", [0x8, 0x81]}}) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022240000009b36afad5391"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0xb71}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x8, 0x2, "aa8e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0xe5, "0579294a742c877f4373cf579c9289c86379c66d4a7f054208c51b45516c0b03d40a3a1d79f9c0b7e5a2236f9c19a1972283e3f3acd6fd423cf691ca9ba1af56bcbc37fc1d1265c46ee01e2536c00033bf3220f7feb0c42bac69a858f12bda544af4ad3f0f23ef7bab797719d6b334e4c663efe9b806aecd52d737741e4ac1a9b96a97280a2e81580bed57d2cd553dc4e802802ebea7a488cb7fa241acfaea6566b85b9570890cfe9231727b16da1ae67ad9be269c177c5d2fbc32ad8026d63f7477c62237b21ae4b2feb452aa108541b23ea74337610c6437407e080ec743a074dd6b3b2b"}, &(0x7f0000000600)={0x20, 0x3, 0x1}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.630778407s ago: executing program 4 (id=937): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1}) 10.772946646s ago: executing program 4 (id=938): r0 = socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffff6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) clock_gettime(0x9, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r1, &(0x7f00000004c0)=""/251, 0xfb, 0x2) 10.583191207s ago: executing program 3 (id=939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="7d2d2c74a25bad96f59a23d83c2688a1764a448a61f7eab0e8b3f39feb3ba7583921ab6949ecde91c45fa01b386f1c6cce7cc90cd63786979d48f77253d6a92d94b30e75738545b21c58260919241119f7e223f5584f72b3b4a9ba043c502ce9164435f73a", 0x65}, {&(0x7f0000000300)="269992d88c177a368f8cbe6373ab307dcb3bb866fbb48f7f1715fa5f1b5229a059ab1c6c49857bc8217d977fa1cfc47ae1b9b5e7e9e6713514f708d136f14e361b8b46cb85c01f491f533bfd094bbea4a832cca3099ddbea4ecba2815b3dbd7d295a6ebcfc37f6e2d7b82356d5b227da1ebc6459c156d14f409accb8788ed1e21c18b6a34b464326d44a944f488c051d715e0eb1564cd1a5a23836478adf1ad98a9c55e589e02209cead6c47d9f933ed5e2d7afa04ff777bf751a758eaba824ee8842b9d", 0xc4}, {&(0x7f0000000400)="8fc151ccc31282ed89936a96a49d2d1b8d24d33f0060e82f830ecab25bfa00b4f145b979bd9ff3917d5abe8f16e1643e021655cd94bfbe297861", 0x3a}], 0x3}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) 8.691719756s ago: executing program 4 (id=940): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc008561b, &(0x7f00000000c0)={0x40980001, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x40040) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r6, 0x8044610a, 0x0) sendmmsg$unix(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="c4095b4135fcbc710ffec3bde139e161c88dc659c449d095f5814ff46b01f073736a1e243f2b99e1479a5398d594426bbe358880053387e671c72e9921001ef87d1cd6f526487d4dc3557b559d9f6e338dfcc4ab11a65fb0f26f4ae7364c63bc516126", 0x63}, {&(0x7f0000000140)="29cdc58b67be7ad2faf6abe5e0", 0xd}], 0x2, 0x0, 0x0, 0x8815}}], 0x1, 0x8004) 8.670266421s ago: executing program 2 (id=941): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00012dbd7000fddbdf25110000000c00990080000000750000000c004300000000000000010006001000000000000600ab0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) sendfile(r5, r5, 0x0, 0xc3) 8.19976151s ago: executing program 3 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_pmu_init) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) dup(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x200) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 6.28866308s ago: executing program 3 (id=944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pid'], 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r7, 0xc1e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet6(0xa, 0x5, 0x0) 4.800006883s ago: executing program 4 (id=945): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/88, 0x58}}], 0x1, 0x40010062, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = epoll_create(0x10000e9) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) r6 = fcntl$dupfd(r5, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x9000001d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f0000000480)={0xe000001b}) 3.72428597s ago: executing program 3 (id=946): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) kcmp(r1, r4, 0x1, r2, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x1004, &(0x7f0000000380)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x1, 0x9, 0x2, 0x0, 0x3]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) sendmmsg$alg(r6, &(0x7f0000007980), 0x0, 0x800) 3.456810248s ago: executing program 4 (id=947): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000140)=0x5) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) syz_io_uring_setup(0x1661, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x2, 0x162}, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) socket$inet6_tcp(0xa, 0x1, 0x0) 1.839847716s ago: executing program 3 (id=948): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 1.74028353s ago: executing program 4 (id=949): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a80488c6f94f90324fc600400037a0a070200050682c137153e370e0c1180fc1110000300", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x3}, 0x4) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f0000000140)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0xfa, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xc4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {}, {0x0, 0xe, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {0x21, 0x5, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9"}, {}, {0x0, 0x1, "d5170000dce9674a36da"}]}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x4040054) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x84, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x20001c}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "95c80b8f60239e3698f17e55c2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x80d2) socket(0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 3 (id=950): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) getrlimit(0x5, &(0x7f0000000480)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x1, 0x1000}, {0x3, 0x5, 0x1800}, {0x4, 0xa, 0x1000}, {0x2, 0x2, 0x1000}, {0x0, 0x3, 0x1000}, {0x0, 0x1, 0x1000}], 0x7, &(0x7f0000000440)={0x0, 0x3938700}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='lock'], 0xc) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='erofs\x00', 0x4806, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) mkdir(0x0, 0x180) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.539026][ T5244] Bluetooth: hci0: command tx timeout [ 1108.775693][ T1016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.035547][ T1016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.206553][ T1016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.332343][ T1016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.551341][T10937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1109.572007][T10937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1109.610515][T10937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1109.637052][T10937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1109.900403][ T1016] bridge_slave_1: left allmulticast mode [ 1109.906279][ T1016] bridge_slave_1: left promiscuous mode [ 1109.929918][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.960882][ T1016] bridge_slave_0: left allmulticast mode [ 1109.966723][ T1016] bridge_slave_0: left promiscuous mode [ 1109.983059][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.013926][ T1016] bridge_slave_1: left allmulticast mode [ 1110.028233][ T1016] bridge_slave_1: left promiscuous mode [ 1110.034194][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.058572][ T1016] bridge_slave_0: left allmulticast mode [ 1110.064302][ T1016] bridge_slave_0: left promiscuous mode [ 1110.071107][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.444573][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.457305][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.470077][ T1016] bond0 (unregistering): Released all slaves [ 1111.738520][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.755557][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.767918][ T1016] bond0 (unregistering): Released all slaves [ 1112.755597][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.790510][T10935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.812354][T10935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1112.978352][T10935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1112.993094][T10935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1113.125952][ T1016] hsr_slave_0: left promiscuous mode [ 1113.134389][ T1016] hsr_slave_1: left promiscuous mode [ 1113.149533][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.157045][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.174872][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.184214][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.211392][ T1016] hsr_slave_0: left promiscuous mode [ 1113.230909][ T1016] hsr_slave_1: left promiscuous mode [ 1113.237803][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.258274][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.269099][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.277828][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.344507][ T1016] veth1_macvtap: left promiscuous mode [ 1113.350328][ T1016] veth0_macvtap: left promiscuous mode [ 1113.356139][ T1016] veth1_vlan: left promiscuous mode [ 1113.363531][ T1016] veth0_vlan: left promiscuous mode [ 1113.375819][ T1016] veth1_macvtap: left promiscuous mode [ 1113.382520][ T1016] veth0_macvtap: left promiscuous mode [ 1113.388443][ T1016] veth1_vlan: left promiscuous mode [ 1113.393929][ T1016] veth0_vlan: left promiscuous mode [ 1114.582603][ T1016] team0 (unregistering): Port device team_slave_1 removed [ 1114.671671][ T1016] team0 (unregistering): Port device team_slave_0 removed [ 1116.366967][ T1016] team0 (unregistering): Port device team_slave_1 removed [ 1116.461399][ T1016] team0 (unregistering): Port device team_slave_0 removed [ 1117.531188][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.766594][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.773948][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.847950][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.855436][T10609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.342377][T10940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.402557][T10940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.459556][T10940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1118.550899][T10940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1118.701488][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.836474][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.884989][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.892306][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.982559][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.989895][ T5365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.185120][T10937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.217360][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.366429][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.415835][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.423189][ T8605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.524781][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.532136][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.104841][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.248549][T10937] veth0_vlan: entered promiscuous mode [ 1120.343790][T10937] veth1_vlan: entered promiscuous mode [ 1120.442205][T10935] veth0_vlan: entered promiscuous mode [ 1120.463165][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.554024][T10935] veth1_vlan: entered promiscuous mode [ 1120.585059][T10937] veth0_macvtap: entered promiscuous mode [ 1120.685125][T10937] veth1_macvtap: entered promiscuous mode [ 1120.810987][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.823028][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.834974][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.846360][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.872041][T10937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.894566][T10935] veth0_macvtap: entered promiscuous mode [ 1120.907509][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.919627][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.929827][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.944570][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.961026][T10937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.970715][T10940] veth0_vlan: entered promiscuous mode [ 1120.986314][T10935] veth1_macvtap: entered promiscuous mode [ 1121.031449][T10937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.043810][T10937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.053525][T10937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.064743][T10937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.108814][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.120305][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.131667][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.142593][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.152944][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.166635][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.195016][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.211281][T10940] veth1_vlan: entered promiscuous mode [ 1121.244455][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.255110][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.268252][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.286865][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.308512][T10935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.319509][T10935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.333294][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.447698][T10935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.461445][T10935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.476811][T10935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.494133][T10935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.512023][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.531679][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.647414][T10940] veth0_macvtap: entered promiscuous mode [ 1121.725877][T10940] veth1_macvtap: entered promiscuous mode [ 1121.777366][ T5365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.800211][ T5365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.912003][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.955480][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.966507][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.988448][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.009846][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.027076][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.037486][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.051046][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.081750][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.099926][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.110909][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.121472][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.133693][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.146727][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.157771][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.170595][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.181691][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.196594][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.253397][T10940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.267614][T10940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.280709][T10940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.298710][T10940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.340192][ T8605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.348374][ T8605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.384646][T10609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.420576][T10609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.607350][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.647333][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.181980][T11112] random: crng reseeded on system resumption [ 1126.722167][ T29] audit: type=1400 audit(1726554105.801:1026): avc: denied { write } for pid=11103 comm="syz.4.743" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1127.666421][ T29] audit: type=1400 audit(1726554110.301:1027): avc: denied { search } for pid=11113 comm="sed" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.793906][ T29] audit: type=1400 audit(1726554110.301:1028): avc: denied { read } for pid=11113 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1451 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1127.928353][ T29] audit: type=1400 audit(1726554110.301:1029): avc: denied { open } for pid=11113 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1451 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1127.985100][T10608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.038038][T10608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.095757][ T29] audit: type=1400 audit(1726554110.301:1030): avc: denied { getattr } for pid=11113 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1451 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1128.252101][ T29] audit: type=1400 audit(1726554110.441:1031): avc: denied { read write } for pid=10935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1128.948300][ T29] audit: type=1400 audit(1726554110.441:1032): avc: denied { open } for pid=10935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1129.003192][T11120] binder: BINDER_SET_CONTEXT_MGR already set [ 1129.016459][T11120] binder: 11115:11120 ioctl 4018620d 20000440 returned -16 [ 1129.058792][ T29] audit: type=1400 audit(1726554110.441:1033): avc: denied { ioctl } for pid=10935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1129.169779][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.198306][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.303837][ T29] audit: type=1400 audit(1726554110.471:1034): avc: denied { read } for pid=4654 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1129.452917][ T29] audit: type=1400 audit(1726554110.471:1035): avc: denied { search } for pid=4654 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.141865][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1132.141889][ T29] audit: type=1400 audit(1726554114.571:1109): avc: denied { ioctl } for pid=11151 comm="syz.1.749" path="socket:[49428]" dev="sockfs" ino=49428 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1132.553966][ T29] audit: type=1400 audit(1726554115.121:1110): avc: denied { unmount } for pid=10935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1134.635472][T11170] hub 9-0:1.0: USB hub found [ 1134.641071][T11170] hub 9-0:1.0: 8 ports detected [ 1134.838616][ T29] audit: type=1400 audit(1726554115.781:1111): avc: denied { append } for pid=11155 comm="syz.2.750" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1135.109362][ T5244] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1135.118452][ T5244] Bluetooth: hci6: Injecting HCI hardware error event [ 1135.130369][ T5244] Bluetooth: hci6: hardware error 0x00 [ 1135.538687][ T29] audit: type=1400 audit(1726554118.131:1112): avc: denied { create } for pid=11163 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1136.158799][ T29] audit: type=1400 audit(1726554118.151:1113): avc: denied { bind } for pid=11163 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1136.280402][ T29] audit: type=1400 audit(1726554118.151:1114): avc: denied { setopt } for pid=11163 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1136.335412][ T29] audit: type=1400 audit(1726554118.161:1115): avc: denied { accept } for pid=11163 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1136.412553][ T29] audit: type=1400 audit(1726554118.881:1116): avc: denied { create } for pid=11174 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1136.679449][ T29] audit: type=1400 audit(1726554119.001:1117): avc: denied { connect } for pid=11174 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1137.605910][ T29] audit: type=1400 audit(1726554119.351:1118): avc: denied { create } for pid=11179 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1137.678771][T11177] loop0: detected capacity change from 0 to 128 [ 1137.728221][ T29] audit: type=1400 audit(1726554119.421:1119): avc: denied { write } for pid=11175 comm="syz.1.756" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1137.991742][ T29] audit: type=1400 audit(1726554120.441:1120): avc: denied { read write } for pid=11179 comm="syz.4.758" name="virtual_nci" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.153351][ T29] audit: type=1400 audit(1726554120.441:1121): avc: denied { open } for pid=11179 comm="syz.4.758" path="/dev/virtual_nci" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.244877][ T5278] libceph: connect (1)[c::]:6789 error -101 [ 1138.253992][ T5278] libceph: mon0 (1)[c::]:6789 connect error [ 1138.291502][ T29] audit: type=1400 audit(1726554120.851:1122): avc: denied { ioctl } for pid=11186 comm="syz.3.759" path="/dev/swradio6" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.399651][ T5244] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1138.448673][T11190] ceph: No mds server is up or the cluster is laggy [ 1138.530593][ T29] audit: type=1400 audit(1726554120.881:1123): avc: denied { create } for pid=11193 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1138.656711][ T29] audit: type=1400 audit(1726554120.971:1124): avc: denied { bind } for pid=11193 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1138.704887][ T5278] libceph: connect (1)[c::]:6789 error -101 [ 1138.723268][ T5278] libceph: mon0 (1)[c::]:6789 connect error [ 1138.744798][ T29] audit: type=1400 audit(1726554120.971:1125): avc: denied { name_bind } for pid=11193 comm="syz.1.760" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1138.839418][ T29] audit: type=1400 audit(1726554120.971:1126): avc: denied { node_bind } for pid=11193 comm="syz.1.760" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1138.869855][ T29] audit: type=1400 audit(1726554121.081:1127): avc: denied { write } for pid=11193 comm="syz.1.760" name="icmp6" dev="proc" ino=4026534175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1139.849830][T11220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.470023][ T2937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.556782][ T8558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1140.576293][ T8558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1140.586224][ T8558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1140.603011][ T8558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1140.611777][ T8558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1140.622811][ T8558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1141.269700][ T2937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.682071][ T2937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.787392][T11238] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1141.809294][T11238] PKCS7: Only support pkcs7_signedData type [ 1142.321421][T11243] netlink: 'syz.3.766': attribute type 16 has an invalid length. [ 1142.330534][T11243] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.766'. [ 1145.649448][ T5244] Bluetooth: hci1: command tx timeout [ 1146.203451][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1146.203478][ T29] audit: type=1400 audit(1726554128.841:1150): avc: denied { write } for pid=11246 comm="syz.3.767" path="socket:[50445]" dev="sockfs" ino=50445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1146.233613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1146.394508][ T2937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.498496][ T29] audit: type=1400 audit(1726554129.031:1151): avc: denied { create } for pid=11246 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1146.559271][ T29] audit: type=1400 audit(1726554129.031:1152): avc: denied { connect } for pid=11246 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1146.975346][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 1147.813867][ T5244] Bluetooth: hci1: command tx timeout [ 1148.307214][ T29] audit: type=1400 audit(1726554130.921:1153): avc: denied { write } for pid=11261 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1148.331685][ T5375] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1149.927812][ T5244] Bluetooth: hci1: command tx timeout [ 1150.635413][ T29] audit: type=1400 audit(1726554133.271:1154): avc: denied { module_request } for pid=11221 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1151.438696][ T29] audit: type=1400 audit(1726554133.401:1155): avc: denied { write } for pid=11277 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1151.875875][ T29] audit: type=1400 audit(1726554133.401:1156): avc: denied { nlmsg_write } for pid=11277 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1151.978675][ T5244] Bluetooth: hci1: command tx timeout [ 1152.003458][ T2937] bridge_slave_1: left allmulticast mode [ 1152.024916][ T2937] bridge_slave_1: left promiscuous mode [ 1152.104143][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.112626][ T29] audit: type=1400 audit(1726554134.471:1157): avc: denied { name_bind } for pid=11276 comm="syz.4.772" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1152.242997][ T2937] bridge_slave_0: left allmulticast mode [ 1152.268450][ T29] audit: type=1400 audit(1726554134.471:1158): avc: denied { node_bind } for pid=11276 comm="syz.4.772" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1152.320211][ T2937] bridge_slave_0: left promiscuous mode [ 1152.326046][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.454576][ T29] audit: type=1400 audit(1726554134.861:1159): avc: denied { read } for pid=11286 comm="syz.1.773" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1152.568455][ T29] audit: type=1400 audit(1726554134.861:1160): avc: denied { open } for pid=11286 comm="syz.1.773" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1152.602790][T11292] loop0: detected capacity change from 0 to 128 [ 1152.679934][ T29] audit: type=1400 audit(1726554135.021:1161): avc: denied { create } for pid=11276 comm="syz.4.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1152.799983][ T29] audit: type=1400 audit(1726554135.121:1162): avc: denied { write } for pid=11286 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1152.957072][ T29] audit: type=1400 audit(1726554135.141:1163): avc: denied { read } for pid=11286 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1153.152700][ T29] audit: type=1400 audit(1726554135.161:1164): avc: denied { write } for pid=11276 comm="syz.4.772" path="socket:[49596]" dev="sockfs" ino=49596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1155.014671][ T8558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1155.027841][ T8558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1155.044497][ T8558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1155.053628][ T8558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1155.125894][ T8558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1155.135398][ T8558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.330006][ T5244] Bluetooth: hci1: command tx timeout [ 1156.462837][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1156.462859][ T29] audit: type=1400 audit(1726554139.101:1172): avc: denied { unmount } for pid=10935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1157.519081][ T5244] Bluetooth: hci2: command tx timeout [ 1159.779083][ T5244] Bluetooth: hci2: command tx timeout [ 1160.908296][ T29] audit: type=1400 audit(1726554143.431:1173): avc: denied { shutdown } for pid=11322 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1161.317168][ T29] audit: type=1400 audit(1726554143.741:1174): avc: denied { ioctl } for pid=11324 comm="syz.3.780" path="socket:[49649]" dev="sockfs" ino=49649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1161.384777][ T29] audit: type=1326 audit(1726554143.751:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.3.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2917def9 code=0x0 [ 1162.198350][ T8558] Bluetooth: hci2: command tx timeout [ 1162.863237][ T29] audit: type=1400 audit(1726554145.481:1176): avc: denied { create } for pid=11334 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1162.908335][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.917132][ T29] audit: type=1400 audit(1726554145.491:1177): avc: denied { connect } for pid=11334 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1163.227315][ T29] audit: type=1400 audit(1726554145.531:1178): avc: denied { write } for pid=11334 comm="syz.3.783" path="socket:[50675]" dev="sockfs" ino=50675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1164.193184][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.208170][ T29] audit: type=1400 audit(1726554146.001:1179): avc: denied { create } for pid=11340 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1164.286509][ T2937] bond0 (unregistering): Released all slaves [ 1164.298272][ T8558] Bluetooth: hci2: command 0x0419 tx timeout [ 1164.327647][ T29] audit: type=1400 audit(1726554146.011:1180): avc: denied { write } for pid=11340 comm="syz.1.784" path="socket:[49663]" dev="sockfs" ino=49663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1164.330758][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1164.372642][ T29] audit: type=1400 audit(1726554146.011:1181): avc: denied { nlmsg_read } for pid=11340 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1164.402128][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1164.428911][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1164.440102][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1164.448229][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1164.455851][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1164.492886][ T5237] Bluetooth: hci0: Malformed LE Event: 0x1d [ 1164.495870][ T29] audit: type=1400 audit(1726554147.051:1182): avc: denied { append } for pid=11346 comm="syz.1.785" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1164.527193][T11350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.547292][T11221] chnl_net:caif_netlink_parms(): no params data found [ 1165.041597][T11351] team_slave_0: entered promiscuous mode [ 1165.058350][ T8231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1165.182978][T11351] team0: Port device team_slave_0 removed [ 1165.300042][ T8231] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1165.342733][ T8231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.384161][ T8231] usb 2-1: config 0 descriptor?? [ 1165.414047][T11356] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.786'. [ 1165.425905][T11356] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.786'. [ 1165.770812][ T8231] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1165.978415][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.060858][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.119255][ T5238] usb 2-1: USB disconnect, device number 6 [ 1166.444658][ T5237] Bluetooth: hci2: command 0x0419 tx timeout [ 1166.462470][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.470316][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.477700][T11221] bridge_slave_0: entered allmulticast mode [ 1167.070219][ T5237] Bluetooth: hci3: command tx timeout [ 1167.085651][T11221] bridge_slave_0: entered promiscuous mode [ 1167.342806][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.359601][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.384470][T11221] bridge_slave_1: entered allmulticast mode [ 1167.403835][T11221] bridge_slave_1: entered promiscuous mode [ 1167.451324][ T2937] hsr_slave_0: left promiscuous mode [ 1167.519163][ T2937] hsr_slave_1: left promiscuous mode [ 1167.581130][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.599039][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.611156][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.629551][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.721630][ T2937] veth1_macvtap: left promiscuous mode [ 1167.738378][ T2937] veth0_macvtap: left promiscuous mode [ 1167.748433][ T2937] veth1_vlan: left promiscuous mode [ 1167.755462][ T2937] veth0_vlan: left promiscuous mode [ 1167.846285][ T29] audit: type=1400 audit(1726554150.481:1183): avc: denied { read write } for pid=11367 comm="syz.1.788" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1167.929979][ T29] audit: type=1400 audit(1726554150.511:1184): avc: denied { open } for pid=11367 comm="syz.1.788" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1168.610284][T11372] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1169.104542][ T5237] Bluetooth: hci3: command tx timeout [ 1170.201058][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1170.441966][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1170.524352][ T29] audit: type=1400 audit(1726554153.161:1185): avc: denied { read } for pid=11381 comm="syz.3.791" name="event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1170.593935][ T29] audit: type=1400 audit(1726554153.191:1186): avc: denied { open } for pid=11381 comm="syz.3.791" path="/dev/input/event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1170.676247][ T29] audit: type=1400 audit(1726554153.211:1187): avc: denied { ioctl } for pid=11381 comm="syz.3.791" path="/dev/input/event2" dev="devtmpfs" ino=839 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1171.042077][ T29] audit: type=1400 audit(1726554153.661:1188): avc: denied { map } for pid=11381 comm="syz.3.791" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1171.098169][ T29] audit: type=1400 audit(1726554153.661:1189): avc: denied { read write } for pid=11381 comm="syz.3.791" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1171.179708][ T5237] Bluetooth: hci3: command tx timeout [ 1171.979482][T11380] team0: Device ipvlan1 failed to register rx_handler [ 1172.296104][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.433630][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.798724][T11221] team0: Port device team_slave_0 added [ 1173.090545][T11221] team0: Port device team_slave_1 added [ 1173.258273][ T5237] Bluetooth: hci3: command tx timeout [ 1173.611788][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.616897][T11391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.626799][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.627083][T11391] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1173.670672][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.688360][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.696405][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.727002][T11391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1173.745909][T11391] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1173.754216][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.914154][T11303] chnl_net:caif_netlink_parms(): no params data found [ 1174.185412][T11221] hsr_slave_0: entered promiscuous mode [ 1174.193560][T11221] hsr_slave_1: entered promiscuous mode [ 1174.202601][T11345] chnl_net:caif_netlink_parms(): no params data found [ 1174.295358][T11391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1174.308141][T11391] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1174.330817][T11391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1174.355521][T11391] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1174.392491][T11391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1174.408258][T11391] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1175.851384][T11422] xt_time: unknown flags 0xc [ 1176.971951][ T29] audit: type=1400 audit(1726554159.611:1190): avc: denied { setopt } for pid=11425 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1177.189435][ T29] audit: type=1400 audit(1726554159.761:1191): avc: denied { mounton } for pid=11425 comm="syz.1.795" path="/proc/93/task" dev="proc" ino=50009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1177.255675][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.314018][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.394308][T11303] bridge_slave_0: entered allmulticast mode [ 1177.483136][T11303] bridge_slave_0: entered promiscuous mode [ 1177.991941][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.008919][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.016363][T11303] bridge_slave_1: entered allmulticast mode [ 1178.025885][T11303] bridge_slave_1: entered promiscuous mode [ 1178.073342][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.080796][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.089077][T11345] bridge_slave_0: entered allmulticast mode [ 1178.097692][T11345] bridge_slave_0: entered promiscuous mode [ 1178.137066][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.144704][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.153455][T11345] bridge_slave_1: entered allmulticast mode [ 1178.163860][T11345] bridge_slave_1: entered promiscuous mode [ 1178.186256][T11303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.201730][T11303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.354187][ T2937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.410622][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.455479][T11303] team0: Port device team_slave_0 added [ 1178.469384][T11303] team0: Port device team_slave_1 added [ 1178.480369][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.540620][ T2937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.647065][T11303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.654444][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.682023][T11303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.697523][T11303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.705449][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.732784][T11303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.771370][ T2937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.797124][T11345] team0: Port device team_slave_0 added [ 1178.813931][T11345] team0: Port device team_slave_1 added [ 1179.087311][ T2937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.201525][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.210840][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.237831][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.322000][T11303] hsr_slave_0: entered promiscuous mode [ 1179.336042][T11303] hsr_slave_1: entered promiscuous mode [ 1179.345723][T11303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.354424][T11303] Cannot create hsr debugfs directory [ 1179.394789][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.405341][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.444855][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.834040][T11345] hsr_slave_0: entered promiscuous mode [ 1179.843420][T11345] hsr_slave_1: entered promiscuous mode [ 1179.850936][T11345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.859422][T11345] Cannot create hsr debugfs directory [ 1180.193176][ T2937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.309780][ T2937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.451533][ T2937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.471739][T11221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1180.493943][T11221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1180.547728][ T2937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.566273][T11221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1180.604931][T11221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1180.966254][ T2937] bridge_slave_1: left allmulticast mode [ 1180.977357][ T2937] bridge_slave_1: left promiscuous mode [ 1180.991013][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.011973][ T2937] bridge_slave_0: left allmulticast mode [ 1181.017715][ T2937] bridge_slave_0: left promiscuous mode [ 1181.037664][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.056380][ T2937] bridge_slave_1: left allmulticast mode [ 1181.065708][ T2937] bridge_slave_1: left promiscuous mode [ 1181.071968][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.107926][ T2937] bridge_slave_0: left allmulticast mode [ 1181.113984][ T2937] bridge_slave_0: left promiscuous mode [ 1181.128666][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.482224][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.496309][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.512973][ T2937] bond0 (unregistering): Released all slaves [ 1182.766644][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.781823][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.794216][ T2937] bond0 (unregistering): Released all slaves [ 1182.964516][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.971323][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.212762][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.369480][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.552866][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.560382][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.573043][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.580403][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.743758][T11303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1183.913356][T11303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1183.946078][T11303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1184.076779][T11303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1184.187005][ T2937] hsr_slave_0: left promiscuous mode [ 1184.194313][ T2937] hsr_slave_1: left promiscuous mode [ 1184.204886][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.212550][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.227029][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.235068][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.253287][ T2937] hsr_slave_0: left promiscuous mode [ 1184.262309][ T2937] hsr_slave_1: left promiscuous mode [ 1184.272989][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.281304][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.290201][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.297869][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.359277][ T2937] veth1_macvtap: left promiscuous mode [ 1184.364865][ T2937] veth0_macvtap: left promiscuous mode [ 1184.372660][ T2937] veth1_vlan: left promiscuous mode [ 1184.378687][ T2937] veth0_vlan: left promiscuous mode [ 1184.386368][ T2937] veth1_macvtap: left promiscuous mode [ 1184.392051][ T2937] veth0_macvtap: left promiscuous mode [ 1184.397802][ T2937] veth1_vlan: left promiscuous mode [ 1184.403356][ T2937] veth0_vlan: left promiscuous mode [ 1185.560622][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1185.645343][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1187.397536][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1187.495318][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1188.687071][T11221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.989803][ T29] audit: type=1400 audit(1726554171.631:1192): avc: denied { sys_module } for pid=11221 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1189.290139][T11345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1189.344874][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.359553][T11345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1189.448386][T11345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1189.555007][T11345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1189.626905][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.652239][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.698074][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.705468][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.771021][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.778435][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.034122][T11221] veth0_vlan: entered promiscuous mode [ 1190.139007][T11221] veth1_vlan: entered promiscuous mode [ 1190.246309][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.365804][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.402099][T11221] veth0_macvtap: entered promiscuous mode [ 1190.462317][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.469689][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.497938][T11221] veth1_macvtap: entered promiscuous mode [ 1190.546305][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.553608][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.714707][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.733465][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.744850][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.766375][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.790208][T11221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.826885][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.837542][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.855410][T11221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.877367][T11221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.891350][T11221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.967306][T11221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.987560][T11221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.999528][T11221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.009552][T11221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.036622][T11303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.519496][ T3411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.528072][ T3411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.609752][T11303] veth0_vlan: entered promiscuous mode [ 1191.678764][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.691609][T11303] veth1_vlan: entered promiscuous mode [ 1191.697721][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.804265][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.904051][T11303] veth0_macvtap: entered promiscuous mode [ 1191.993763][T11303] veth1_macvtap: entered promiscuous mode [ 1192.154939][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.306024][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.378065][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.407020][ T29] audit: type=1400 audit(1726554175.041:1193): avc: denied { ioctl } for pid=11518 comm="syz.1.804" path="socket:[51831]" dev="sockfs" ino=51831 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1192.421545][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.450547][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.477850][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.496213][ T29] audit: type=1400 audit(1726554175.041:1194): avc: denied { ioctl } for pid=11518 comm="syz.1.804" path="socket:[51827]" dev="sockfs" ino=51827 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1192.528095][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.568281][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.595136][T11303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.722870][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.772759][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.808746][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.890402][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.055414][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.097331][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.157503][T11303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.242307][T11303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.268115][T11303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.279502][T11303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.290072][T11303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.720496][T11345] veth0_vlan: entered promiscuous mode [ 1193.778195][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.786071][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.852626][T11345] veth1_vlan: entered promiscuous mode [ 1194.017129][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.049065][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.198372][T11345] veth0_macvtap: entered promiscuous mode [ 1194.247589][T11345] veth1_macvtap: entered promiscuous mode [ 1194.440644][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.440676][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.440690][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.440711][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.440727][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.440747][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.440770][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.440790][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.443194][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.503748][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.503784][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.503798][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.503819][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.503835][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.503855][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.503870][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.503890][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.506120][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.564101][T11345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.564161][T11345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.564209][T11345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.564258][T11345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.613147][ T29] audit: type=1400 audit(1726554177.231:1195): avc: denied { getopt } for pid=11541 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1194.779524][ T5356] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1194.926689][ T3411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.926722][ T3411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.973130][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 1194.986438][ T5356] usb 3-1: Using ep0 maxpacket: 32 [ 1195.124897][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 1195.149111][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 1195.207123][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.261155][ T5356] usb 3-1: config 7 has an invalid interface number: 163 but max is 0 [ 1195.269765][ T5356] usb 3-1: config 7 has an invalid interface number: 2 but max is 0 [ 1195.277833][ T5356] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.291365][ T5356] usb 3-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 1195.291869][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.309951][ T5356] usb 3-1: config 7 has no interface number 0 [ 1195.316117][ T5356] usb 3-1: config 7 has no interface number 1 [ 1195.328895][ T5356] usb 3-1: config 7 interface 163 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1195.354734][ T5356] usb 3-1: config 7 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1195.373810][ T5356] usb 3-1: config 7 interface 163 has no altsetting 0 [ 1195.389217][ T5356] usb 3-1: config 7 interface 2 has no altsetting 0 [ 1195.406274][ T5356] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.0e [ 1195.432044][ T5356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.475217][ T5356] usb 3-1: Product: syz [ 1195.506222][ T5356] usb 3-1: Manufacturer: syz [ 1195.525869][ T5356] usb 3-1: SerialNumber: syz [ 1199.149047][ T5356] qmi_wwan 3-1:7.163: probe with driver qmi_wwan failed with error -22 [ 1199.221825][ T5356] usb 3-1: USB disconnect, device number 7 [ 1199.394070][ T29] audit: type=1400 audit(1726554182.031:1196): avc: denied { create } for pid=11564 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1200.271499][T11574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1200.498309][ T29] audit: type=1400 audit(1726554182.701:1197): avc: denied { bind } for pid=11566 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1200.738787][ T29] audit: type=1400 audit(1726554183.301:1198): avc: denied { setopt } for pid=11577 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1200.894724][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 1201.158509][ T29] audit: type=1400 audit(1726554183.491:1199): avc: denied { shutdown } for pid=11569 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1201.323175][ T29] audit: type=1400 audit(1726554183.491:1200): avc: denied { connect } for pid=11569 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1201.344544][ T5375] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1201.410383][ T29] audit: type=1400 audit(1726554183.491:1201): avc: denied { name_connect } for pid=11569 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1201.528176][ T5375] usb 5-1: Using ep0 maxpacket: 16 [ 1201.578505][ T5212] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1201.601751][ T5375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.681757][ T5375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.757602][ T5375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1201.840385][ T5212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.937089][ T5375] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1201.993967][ T5212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.021894][ T5375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.066471][ T5212] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1202.087046][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1202.339675][ T5375] usb 5-1: config 0 descriptor?? [ 1202.354755][ T5212] usb 2-1: SerialNumber: syz [ 1203.062106][ T29] audit: type=1400 audit(1726554185.461:1202): avc: denied { create } for pid=11584 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1203.121237][ T5375] usbhid 5-1:0.0: can't add hid device: -71 [ 1203.130007][ T5375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1203.216408][ T5375] usb 5-1: USB disconnect, device number 8 [ 1203.605900][T11593] ptrace attach of "./syz-executor exec"[11221] was attempted by "./syz-executor exec"[11593] [ 1203.678737][ T5212] usb 2-1: invalid UAC_HEADER (v1) [ 1203.705947][ T29] audit: type=1400 audit(1726554186.331:1203): avc: denied { setopt } for pid=11590 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1203.844939][ T5212] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1203.906443][ T5212] usb 2-1: USB disconnect, device number 7 [ 1204.077305][T11475] udevd[11475]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1206.099537][ T29] audit: type=1400 audit(1726554188.721:1204): avc: denied { write } for pid=11609 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1206.346379][ T29] audit: type=1400 audit(1726554188.981:1205): avc: denied { write } for pid=11612 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1207.191150][ T29] audit: type=1400 audit(1726554189.831:1206): avc: denied { create } for pid=11612 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1208.578334][ T5238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1209.537435][T11633] netlink: 'syz.0.812': attribute type 16 has an invalid length. [ 1209.545705][T11633] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.812'. [ 1212.342563][ T29] audit: type=1400 audit(1726554194.975:1207): avc: denied { read } for pid=11638 comm="syz.0.815" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1212.443476][ T29] audit: type=1400 audit(1726554194.975:1208): avc: denied { open } for pid=11638 comm="syz.0.815" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1213.472951][ T29] audit: type=1400 audit(1726554195.735:1209): avc: denied { create } for pid=11638 comm="syz.0.815" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1213.698380][ T29] audit: type=1400 audit(1726554195.735:1210): avc: denied { write } for pid=11638 comm="syz.0.815" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1213.831568][ T29] audit: type=1400 audit(1726554195.735:1211): avc: denied { open } for pid=11638 comm="syz.0.815" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1213.977321][ T29] audit: type=1400 audit(1726554195.745:1212): avc: denied { ioctl } for pid=11638 comm="syz.0.815" path="/6/file0" dev="tmpfs" ino=49 ioctlcmd=0x1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1214.125176][ T29] audit: type=1400 audit(1726554195.985:1213): avc: denied { bind } for pid=11637 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1214.196240][ T29] audit: type=1400 audit(1726554196.075:1214): avc: denied { unlink } for pid=11221 comm="syz-executor" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1214.408411][ T29] audit: type=1400 audit(1726554196.285:1215): avc: denied { bind } for pid=11636 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1214.472742][ T29] audit: type=1400 audit(1726554196.285:1216): avc: denied { name_bind } for pid=11636 comm="syz.1.816" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1223.921489][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1223.921516][ T29] audit: type=1400 audit(1726554206.555:1227): avc: denied { ioctl } for pid=11691 comm="syz.0.828" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53327 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1224.264302][ T29] audit: type=1400 audit(1726554206.895:1228): avc: denied { create } for pid=11704 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1224.357793][ T29] audit: type=1400 audit(1726554206.965:1229): avc: denied { setopt } for pid=11704 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1224.608331][ T29] audit: type=1400 audit(1726554207.215:1230): avc: denied { ioctl } for pid=11703 comm="syz.4.830" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1226.101059][ T29] audit: type=1400 audit(1726554208.615:1231): avc: denied { mounton } for pid=11719 comm="syz.0.832" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1227.137741][ T29] audit: type=1400 audit(1726554209.765:1232): avc: denied { bind } for pid=11704 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1229.264107][ T29] audit: type=1400 audit(1726554210.745:1233): avc: denied { write } for pid=11730 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1229.593283][ T29] audit: type=1400 audit(1726554212.215:1234): avc: denied { sqpoll } for pid=11736 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1232.784235][ T29] audit: type=1400 audit(1726554215.415:1235): avc: denied { write } for pid=11741 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1232.929696][T11764] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.840'. [ 1232.951920][T11764] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.840'. [ 1233.106181][T11771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 1233.826857][T11776] gfs2: path_lookup on c::: returned error -2 [ 1238.175621][ T29] audit: type=1400 audit(1726554220.695:1236): avc: denied { mount } for pid=11783 comm="syz.0.843" name="/" dev="pstore" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1239.246687][ T29] audit: type=1400 audit(1726554220.755:1237): avc: denied { mount } for pid=11783 comm="syz.0.843" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1239.374408][ T29] audit: type=1326 audit(1726554221.495:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11783 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77df7def9 code=0x7fc00000 [ 1239.567245][ T29] audit: type=1326 audit(1726554221.495:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11783 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa77df7def9 code=0x7fc00000 [ 1239.794919][ T29] audit: type=1400 audit(1726554221.855:1240): avc: denied { unmount } for pid=11221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1240.028332][ T29] audit: type=1400 audit(1726554222.455:1241): avc: denied { ioctl } for pid=11794 comm="syz.0.845" path="socket:[53532]" dev="sockfs" ino=53532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1241.371156][ T29] audit: type=1400 audit(1726554223.995:1242): avc: denied { name_bind } for pid=11800 comm="syz.4.848" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1241.508318][ T8801] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1241.798140][ T8801] usb 2-1: Using ep0 maxpacket: 8 [ 1241.805829][ T8801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.839066][ T8801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.880850][ T8801] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.965160][ T8801] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1242.058316][ T29] audit: type=1400 audit(1726554224.685:1243): avc: denied { create } for pid=11800 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1242.082052][ T8801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.208219][ T29] audit: type=1400 audit(1726554224.765:1244): avc: denied { connect } for pid=11800 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1242.236573][ T8801] usb 2-1: config 0 descriptor?? [ 1242.354934][ T29] audit: type=1400 audit(1726554224.815:1245): avc: denied { write } for pid=11800 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1242.730973][ T8801] creative-sb0540 0003:041E:3100.0003: unknown main item tag 0x0 [ 1242.780365][ T8801] creative-sb0540 0003:041E:3100.0003: unknown main item tag 0x0 [ 1242.834185][ T8801] creative-sb0540 0003:041E:3100.0003: item fetching failed at offset 4/5 [ 1242.890335][ T8801] creative-sb0540 0003:041E:3100.0003: parse failed [ 1242.897202][ T8801] creative-sb0540 0003:041E:3100.0003: probe with driver creative-sb0540 failed with error -22 [ 1243.315268][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1243.388240][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1243.423336][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1243.458627][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.482327][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1243.490102][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.601879][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1243.601899][ T29] audit: type=1400 audit(1726554226.235:1247): avc: denied { map } for pid=11831 comm="syz.0.852" path="socket:[53604]" dev="sockfs" ino=53604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1243.711100][ T29] audit: type=1400 audit(1726554226.275:1248): avc: denied { read } for pid=11831 comm="syz.0.852" path="socket:[53604]" dev="sockfs" ino=53604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1243.832469][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.896795][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 1243.991049][ T5238] usb 2-1: USB disconnect, device number 9 [ 1244.594493][T11846] xt_CONNSECMARK: invalid mode: 0 [ 1244.660410][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.667219][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.588713][ T5244] Bluetooth: hci4: command tx timeout [ 1245.773097][T11848] Invalid option length (209926) for dns_resolver key [ 1245.872783][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.900080][ T29] audit: type=1400 audit(1726554228.525:1249): avc: denied { create } for pid=11822 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1245.993390][T11832] team0: Device netdevsim2 is up. Set it down before adding it as a team port [ 1246.049847][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 1246.156896][ T29] audit: type=1400 audit(1726554228.785:1250): avc: denied { ioctl } for pid=11852 comm="syz.4.855" path="socket:[53627]" dev="sockfs" ino=53627 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1246.665861][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.675262][ T5244] Bluetooth: hci4: command tx timeout [ 1247.722193][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.109788][ T5244] Bluetooth: hci4: command tx timeout [ 1252.399349][T11826] chnl_net:caif_netlink_parms(): no params data found [ 1254.938788][ T5237] Bluetooth: hci4: command tx timeout [ 1257.249183][T11898] syz.2.864 (11898): drop_caches: 2 [ 1259.536692][ T12] bridge_slave_1: left allmulticast mode [ 1259.579165][ T12] bridge_slave_1: left promiscuous mode [ 1259.585084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.586235][ T29] audit: type=1400 audit(1726554242.205:1251): avc: denied { ioctl } for pid=11910 comm="syz.2.866" path="socket:[54434]" dev="sockfs" ino=54434 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1259.692179][ T12] bridge_slave_0: left allmulticast mode [ 1259.730187][ T12] bridge_slave_0: left promiscuous mode [ 1259.747284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.757907][ T29] audit: type=1400 audit(1726554242.385:1252): avc: denied { write } for pid=4654 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.002519][ T29] audit: type=1400 audit(1726554242.385:1253): avc: denied { remove_name } for pid=4654 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.139297][ T29] audit: type=1400 audit(1726554242.385:1254): avc: denied { rename } for pid=4654 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1260.261761][ T29] audit: type=1400 audit(1726554242.385:1255): avc: denied { add_name } for pid=4654 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.369169][ T29] audit: type=1400 audit(1726554242.385:1256): avc: denied { unlink } for pid=4654 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1260.471397][ T29] audit: type=1400 audit(1726554242.385:1257): avc: denied { create } for pid=4654 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1260.492133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.168507][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1262.190357][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1262.208803][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1262.219947][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1262.231509][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1262.244522][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1263.746039][ T29] audit: type=1400 audit(1726554246.375:1258): avc: denied { getopt } for pid=11946 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1264.450557][ T5244] Bluetooth: hci1: command tx timeout [ 1266.722894][ T29] audit: type=1400 audit(1726554249.355:1259): avc: denied { setopt } for pid=11956 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1266.768542][ T5212] IPVS: starting estimator thread 0... [ 1266.910583][T11958] IPVS: using max 15 ests per chain, 36000 per kthread [ 1267.004469][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.262150][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.295685][ T12] bond0 (unregistering): Released all slaves [ 1268.130982][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.181063][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.209203][T11826] bridge_slave_0: entered allmulticast mode [ 1268.244460][T11826] bridge_slave_0: entered promiscuous mode [ 1268.491999][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.510500][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.546019][T11826] bridge_slave_1: entered allmulticast mode [ 1268.620706][ T5244] Bluetooth: hci1: command tx timeout [ 1269.197632][T11826] bridge_slave_1: entered promiscuous mode [ 1270.698199][ T5244] Bluetooth: hci1: command tx timeout [ 1271.321600][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.394320][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.271718][ T29] audit: type=1400 audit(1726554254.495:1260): avc: denied { setopt } for pid=11980 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1272.757697][T11983] netlink: 56 bytes leftover after parsing attributes in process `syz.1.878'. [ 1272.894451][ T5244] Bluetooth: hci1: command tx timeout [ 1273.437191][ T29] audit: type=1400 audit(1726554256.065:1261): avc: denied { write } for pid=11987 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1273.519237][T11826] team0: Port device team_slave_0 added [ 1273.648356][T11826] team0: Port device team_slave_1 added [ 1273.919915][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1273.935107][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1273.947239][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1273.965543][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1273.974467][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1273.983445][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1274.077212][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.092233][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.290852][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.082884][ T12] hsr_slave_0: left promiscuous mode [ 1275.095063][ T12] hsr_slave_1: left promiscuous mode [ 1275.107271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.123580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.141931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.150723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.419569][ T12] veth1_macvtap: left promiscuous mode [ 1275.445082][ T12] veth0_macvtap: left promiscuous mode [ 1275.458886][ T12] veth1_vlan: left promiscuous mode [ 1275.464846][ T12] veth0_vlan: left promiscuous mode [ 1275.518137][T12001] netlink: 244 bytes leftover after parsing attributes in process `syz.4.881'. [ 1276.022166][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 1276.034186][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 1276.066192][ T5244] Bluetooth: hci2: command tx timeout [ 1276.498344][ T29] audit: type=1400 audit(1726554259.045:1262): avc: denied { open } for pid=12004 comm="syz.4.883" path="/dev/ttyqd" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1278.147567][ T5244] Bluetooth: hci2: command tx timeout [ 1278.568479][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1278.740926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1280.261841][ T29] audit: type=1400 audit(1726554262.615:1263): avc: denied { bind } for pid=12017 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1280.285463][ T5244] Bluetooth: hci2: command tx timeout [ 1280.465879][ T29] audit: type=1400 audit(1726554262.645:1264): avc: denied { create } for pid=12017 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1280.718249][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.725269][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.751250][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.795404][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.255388][ T29] audit: type=1400 audit(1726554263.875:1265): avc: denied { write } for pid=12027 comm="syz.1.888" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1281.294822][T11826] hsr_slave_0: entered promiscuous mode [ 1281.311212][T11826] hsr_slave_1: entered promiscuous mode [ 1281.319683][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.327292][T11826] Cannot create hsr debugfs directory [ 1281.877402][T12038] affs: Unrecognized mount option "8]DKxp'di!欄" or missing value [ 1281.888163][T12038] affs: Error parsing options [ 1282.431472][ T5244] Bluetooth: hci2: command tx timeout [ 1282.437001][ T29] audit: type=1400 audit(1726554264.475:1266): avc: denied { accept } for pid=12032 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1282.516067][ T29] audit: type=1400 audit(1726554264.475:1267): avc: denied { ioctl } for pid=12032 comm="syz.4.889" path="socket:[54007]" dev="sockfs" ino=54007 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1282.769866][ T29] audit: type=1400 audit(1726554265.405:1268): avc: denied { ioctl } for pid=12039 comm="syz.4.890" path="socket:[54018]" dev="sockfs" ino=54018 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1282.851795][ T29] audit: type=1400 audit(1726554265.435:1269): avc: denied { getopt } for pid=12039 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1282.930571][T12040] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1282.932307][ T29] audit: type=1400 audit(1726554265.465:1270): avc: denied { bind } for pid=12039 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1283.027834][ T29] audit: type=1400 audit(1726554265.475:1271): avc: denied { read } for pid=12039 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1283.261719][ T29] audit: type=1400 audit(1726554265.895:1272): avc: denied { write } for pid=12049 comm="syz.1.891" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1283.284537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.537742][T12051] kvm: emulating exchange as write [ 1285.158506][T11937] chnl_net:caif_netlink_parms(): no params data found [ 1285.505419][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.737246][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.177092][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.323674][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1287.323698][ T29] audit: type=1400 audit(1726554269.955:1274): avc: denied { ioctl } for pid=12090 comm="syz.4.895" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1287.405325][T11992] chnl_net:caif_netlink_parms(): no params data found [ 1287.553943][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.648528][T12092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.030245][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.052252][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.061773][T11937] bridge_slave_0: entered allmulticast mode [ 1288.079805][T11937] bridge_slave_0: entered promiscuous mode [ 1288.099831][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.107089][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.120104][T11937] bridge_slave_1: entered allmulticast mode [ 1288.141330][T11937] bridge_slave_1: entered promiscuous mode [ 1288.346035][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.462279][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.640246][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.647681][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.656861][T11992] bridge_slave_0: entered allmulticast mode [ 1288.665022][T11992] bridge_slave_0: entered promiscuous mode [ 1288.740834][T11937] team0: Port device team_slave_0 added [ 1288.929503][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.941163][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.958457][T11992] bridge_slave_1: entered allmulticast mode [ 1288.967154][T11992] bridge_slave_1: entered promiscuous mode [ 1288.979956][T11937] team0: Port device team_slave_1 added [ 1289.655115][T11826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1291.138039][T12112] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 1292.122827][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.146485][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.228811][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.491007][T11826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1292.550621][T11826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1292.576812][T11826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1292.928360][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.633834][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.699467][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.729805][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.808914][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.132981][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.162226][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.264728][T11937] hsr_slave_0: entered promiscuous mode [ 1294.272583][T11937] hsr_slave_1: entered promiscuous mode [ 1294.279615][T11937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.287243][T11937] Cannot create hsr debugfs directory [ 1294.350071][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.376132][T11992] team0: Port device team_slave_0 added [ 1294.459869][T11992] team0: Port device team_slave_1 added [ 1294.500276][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.664753][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.672868][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.700916][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.765230][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.772829][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.802008][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.991238][T11992] hsr_slave_0: entered promiscuous mode [ 1294.999611][T11992] hsr_slave_1: entered promiscuous mode [ 1295.006457][T11992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1295.014853][T11992] Cannot create hsr debugfs directory [ 1295.335964][ T62] bridge_slave_1: left allmulticast mode [ 1295.356321][ T62] bridge_slave_1: left promiscuous mode [ 1295.362884][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.375769][ T62] bridge_slave_0: left allmulticast mode [ 1295.383387][ T62] bridge_slave_0: left promiscuous mode [ 1295.390048][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.412759][ T62] bridge_slave_1: left allmulticast mode [ 1295.420484][ T62] bridge_slave_1: left promiscuous mode [ 1295.426361][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.437222][ T62] bridge_slave_0: left allmulticast mode [ 1295.443199][ T62] bridge_slave_0: left promiscuous mode [ 1295.451415][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.645622][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.661013][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.672835][ T62] bond0 (unregistering): Released all slaves [ 1296.953029][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.966882][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.980745][ T62] bond0 (unregistering): Released all slaves [ 1297.119243][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.635025][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.762864][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.770200][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.985638][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.993048][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.258184][ T62] hsr_slave_0: left promiscuous mode [ 1298.280363][ T62] hsr_slave_1: left promiscuous mode [ 1298.295736][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.305183][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.327037][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.335616][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.367114][ T62] hsr_slave_0: left promiscuous mode [ 1298.381431][ T62] hsr_slave_1: left promiscuous mode [ 1298.399505][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.407101][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.423975][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.438125][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.539973][ T62] veth1_macvtap: left promiscuous mode [ 1298.545642][ T62] veth0_macvtap: left promiscuous mode [ 1298.552315][ T62] veth1_vlan: left promiscuous mode [ 1298.557774][ T62] veth0_vlan: left promiscuous mode [ 1298.566817][ T62] veth1_macvtap: left promiscuous mode [ 1298.572609][ T62] veth0_macvtap: left promiscuous mode [ 1298.579220][ T62] veth1_vlan: left promiscuous mode [ 1298.585170][ T62] veth0_vlan: left promiscuous mode [ 1300.466342][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1300.484047][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1300.493691][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1300.507815][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1300.519178][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1300.526898][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1300.746648][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1300.838730][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1302.554764][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1302.624684][ T5244] Bluetooth: hci5: command tx timeout [ 1302.655843][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1304.698430][ T5244] Bluetooth: hci5: command tx timeout [ 1304.726272][T11937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1304.741201][T11937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1304.786613][T11937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1304.848097][T11937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1304.952792][T12178] chnl_net:caif_netlink_parms(): no params data found [ 1305.218128][T11992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1305.252399][T11992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1305.317900][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.325451][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.334279][T12178] bridge_slave_0: entered allmulticast mode [ 1305.343961][T12178] bridge_slave_0: entered promiscuous mode [ 1305.355619][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.363389][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.372815][T12178] bridge_slave_1: entered allmulticast mode [ 1305.382981][T12178] bridge_slave_1: entered promiscuous mode [ 1305.392079][T11992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1305.451924][T11992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1305.494719][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.517220][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.671944][T12178] team0: Port device team_slave_0 added [ 1305.740237][T12178] team0: Port device team_slave_1 added [ 1305.827064][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.834509][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.902779][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.910110][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.937019][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.952051][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.961684][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.993315][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.117125][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.159878][T12178] hsr_slave_0: entered promiscuous mode [ 1306.166937][T12178] hsr_slave_1: entered promiscuous mode [ 1306.286217][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.436645][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.443946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.552365][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.559772][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.637083][ T5365] bridge_slave_1: left allmulticast mode [ 1306.645933][ T5365] bridge_slave_1: left promiscuous mode [ 1306.652545][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.671100][ T5365] bridge_slave_0: left allmulticast mode [ 1306.676824][ T5365] bridge_slave_0: left promiscuous mode [ 1306.690904][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.781621][ T5244] Bluetooth: hci5: command tx timeout [ 1307.605150][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.619433][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.632817][ T5365] bond0 (unregistering): Released all slaves [ 1307.849853][ T5365] hsr_slave_0: left promiscuous mode [ 1307.856097][ T5365] hsr_slave_1: left promiscuous mode [ 1307.863069][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.871277][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.206453][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 1308.264433][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 1308.862375][ T5244] Bluetooth: hci5: command tx timeout [ 1309.108901][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.325549][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.457691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.465052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.671849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.679190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.202449][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.259360][T12178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1310.296322][T12178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1310.353992][T12178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1310.383692][T12178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1310.587623][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.606919][T11937] veth0_vlan: entered promiscuous mode [ 1310.675942][T11937] veth1_vlan: entered promiscuous mode [ 1310.826268][T11937] veth0_macvtap: entered promiscuous mode [ 1310.865127][T11992] veth0_vlan: entered promiscuous mode [ 1310.895680][T11937] veth1_macvtap: entered promiscuous mode [ 1310.959554][T11992] veth1_vlan: entered promiscuous mode [ 1311.001915][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.020554][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.031569][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.042588][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.055857][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.103583][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.117182][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.128452][T11937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.140700][T11937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.154494][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.190455][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.236336][T11937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.247289][T11937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.258489][T11937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.267297][T11937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.340705][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.351878][T11992] veth0_macvtap: entered promiscuous mode [ 1311.420778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.428136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.491983][T11992] veth1_macvtap: entered promiscuous mode [ 1311.591590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.598948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.760751][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.778145][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.795181][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.811917][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.823793][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.834548][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.846308][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.857394][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.875425][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.893279][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.905309][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.916093][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.927198][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.938352][T11992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.952078][T11992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.965035][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.079018][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.086078][T11992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.096628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.104764][T11992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.115392][T11992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.125241][T11992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.202292][T12178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1312.661572][ T29] audit: type=1400 audit(1726554295.195:1275): avc: denied { create } for pid=12250 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1313.246083][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1313.261169][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1313.272669][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1313.484100][T12258] infiniband syz2: set active [ 1313.489431][T12258] infiniband syz2: added ip6gretap0 [ 1313.500628][T12258] syz2: rxe_create_cq: returned err = -12 [ 1313.507375][T12258] infiniband syz2: Couldn't create ib_mad CQ [ 1313.513869][T12258] infiniband syz2: Couldn't open port 1 [ 1313.563406][T12258] RDS/IB: syz2: added [ 1313.568626][T12258] smc: adding ib device syz2 with port count 1 [ 1313.576955][T12258] smc: ib device syz2 port 1 has pnetid [ 1313.589850][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1313.810604][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1314.031261][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1314.253160][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1314.354102][ T5308] ip6gretap0 speed is unknown, defaulting to 1000 [ 1314.514347][ T29] audit: type=1400 audit(1726554295.205:1276): avc: denied { getopt } for pid=12250 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1314.638711][T12258] ip6gretap0 speed is unknown, defaulting to 1000 [ 1315.022651][ T29] audit: type=1400 audit(1726554295.865:1277): avc: denied { getopt } for pid=12254 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1315.138990][ T5238] ip6gretap0 speed is unknown, defaulting to 1000 [ 1315.175841][T10608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.208119][T10608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.570931][T10608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.617542][T10608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.930428][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.271210][T12274] ip6gretap0 speed is unknown, defaulting to 1000 [ 1321.037825][T12178] veth0_vlan: entered promiscuous mode [ 1321.168254][ T29] audit: type=1326 audit(1726554303.795:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.223221][ T29] audit: type=1326 audit(1726554303.795:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.308106][ T29] audit: type=1326 audit(1726554303.835:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.320588][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 1321.395548][ T29] audit: type=1326 audit(1726554303.835:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.640022][ T29] audit: type=1326 audit(1726554303.855:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.666855][ T29] audit: type=1326 audit(1726554303.855:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1321.688243][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 1321.691305][ T29] audit: type=1326 audit(1726554303.855:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1323.385982][ T29] audit: type=1326 audit(1726554303.855:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1323.433449][ T29] audit: type=1326 audit(1726554303.855:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1323.446162][T12178] veth1_vlan: entered promiscuous mode [ 1323.460387][ T29] audit: type=1326 audit(1726554303.855:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.4.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f18b937def9 code=0x7ffc0000 [ 1323.548788][T10441] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1323.734156][T12178] veth0_macvtap: entered promiscuous mode [ 1323.779069][T10441] usb 5-1: Using ep0 maxpacket: 8 [ 1323.779818][T12178] veth1_macvtap: entered promiscuous mode [ 1323.797718][T10441] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 1323.845308][T10441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.854629][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.888517][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.903924][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.914661][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.928064][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.952118][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.969464][T10441] usb 5-1: config 0 descriptor?? [ 1324.017055][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.057631][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.109214][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.136674][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.155200][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.203816][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.230989][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.248046][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.278105][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.296089][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.349327][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.358253][T10441] usb 5-1: USB disconnect, device number 9 [ 1324.405809][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.481904][T12178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.490899][T12178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.499722][T12178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.512627][T12178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.920782][T12304] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 1327.266294][T10608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.308459][T10608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.458652][T12315] input: syz1 as /devices/virtual/input/input8 [ 1327.502559][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1327.502584][ T29] audit: type=1400 audit(1726554310.115:1320): avc: denied { read } for pid=4657 comm="acpid" name="event4" dev="devtmpfs" ino=2571 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1327.502676][ T29] audit: type=1400 audit(1726554310.125:1321): avc: denied { open } for pid=4657 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2571 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1327.502774][ T29] audit: type=1400 audit(1726554310.125:1322): avc: denied { ioctl } for pid=4657 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2571 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1327.557937][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.587746][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.788721][ T29] audit: type=1400 audit(1726554310.425:1323): avc: denied { bind } for pid=12312 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1327.838241][ T29] audit: type=1400 audit(1726554310.455:1324): avc: denied { listen } for pid=12312 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1328.086704][ T29] audit: type=1400 audit(1726554310.655:1325): avc: denied { accept } for pid=12312 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1332.478679][ T5244] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1332.544801][ T29] audit: type=1326 audit(1726554315.105:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.3.916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b857def9 code=0x0 [ 1333.459245][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1335.346071][T12327] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1335.418981][ T1183] IPVS: starting estimator thread 0... [ 1335.559507][T12343] IPVS: using max 22 ests per chain, 52800 per kthread [ 1336.282528][T12347] netlink: 81772 bytes leftover after parsing attributes in process `syz.3.922'. [ 1336.956662][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.384785][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1337.399496][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1337.409284][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1337.421816][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1337.434640][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1337.442744][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1338.540458][ T29] audit: type=1400 audit(1726554321.145:1327): avc: denied { create } for pid=12352 comm="syz.4.925" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1338.584239][T12353] syz.4.925: attempt to access beyond end of device [ 1338.584239][T12353] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1338.629818][T12353] SQUASHFS error: Failed to read block 0x0: -5 [ 1338.682794][T12353] unable to read squashfs_super_block [ 1338.705308][ T29] audit: type=1400 audit(1726554321.215:1328): avc: denied { mounton } for pid=12352 comm="syz.4.925" path="/42/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1338.719372][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.877904][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.932501][T12356] ip6gretap0 speed is unknown, defaulting to 1000 [ 1339.017200][T12366] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 1339.029915][T12366] ALSA: mixer_oss: invalid OSS volume 'OGAINW1' [ 1339.112690][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.501549][ T5237] Bluetooth: hci0: command tx timeout [ 1339.576783][ T29] audit: type=1400 audit(1726554322.205:1329): avc: denied { unlink } for pid=11345 comm="syz-executor" name="file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1339.988942][ T62] bridge_slave_1: left allmulticast mode [ 1340.028080][ T62] bridge_slave_1: left promiscuous mode [ 1340.048443][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.084701][ T62] bridge_slave_0: left allmulticast mode [ 1340.114828][ T62] bridge_slave_0: left promiscuous mode [ 1340.407056][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.417799][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1341.338257][ T29] audit: type=1400 audit(1726554323.485:1330): avc: denied { create } for pid=12371 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1342.338698][T10231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1342.351957][ T5244] Bluetooth: hci0: command tx timeout [ 1342.370326][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1342.381638][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1342.400563][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1342.408844][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1342.651809][ T29] audit: type=1400 audit(1726554323.495:1331): avc: denied { read } for pid=12371 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1343.228494][ T5308] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1343.485033][ T5308] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.507904][ T5308] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1343.582855][ T5308] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 1343.606165][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1343.636786][ T5308] usb 3-1: Product: syz [ 1343.643930][ T5308] usb 3-1: SerialNumber: syz [ 1343.670394][ T5308] option 3-1:7.0: GSM modem (1-port) converter detected [ 1344.054442][ T5308] usb 3-1: USB disconnect, device number 8 [ 1344.064893][ T5308] option 3-1:7.0: device disconnected [ 1344.388399][ T5244] Bluetooth: hci0: command tx timeout [ 1344.603412][ T5244] Bluetooth: hci1: command tx timeout [ 1346.196783][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.230017][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.257566][ T62] bond0 (unregistering): Released all slaves [ 1346.698263][ T5237] Bluetooth: hci1: command tx timeout [ 1346.703750][ T5237] Bluetooth: hci0: command tx timeout [ 1346.835005][T12374] ip6gretap0 speed is unknown, defaulting to 1000 [ 1347.769824][ T29] audit: type=1400 audit(1726554330.405:1332): avc: denied { connect } for pid=12405 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1347.879770][ T29] audit: type=1400 audit(1726554330.515:1333): avc: denied { getopt } for pid=12405 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1347.920238][T12356] chnl_net:caif_netlink_parms(): no params data found [ 1348.059479][ T8231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1348.279269][ T8231] usb 3-1: Using ep0 maxpacket: 16 [ 1348.287153][ T8231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1348.308152][ T8231] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1348.318896][ T8231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.331784][ T8231] usb 3-1: config 0 descriptor?? [ 1348.788291][ T5237] Bluetooth: hci1: command tx timeout [ 1348.885721][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.930847][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.963701][T12356] bridge_slave_0: entered allmulticast mode [ 1349.010400][T12356] bridge_slave_0: entered promiscuous mode [ 1349.145724][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.161146][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.178474][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.178815][T12356] bridge_slave_1: entered allmulticast mode [ 1349.254624][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.304031][T12356] bridge_slave_1: entered promiscuous mode [ 1349.357538][ T8231] hid (null): report_id 0 is invalid [ 1349.357762][T12428] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.936'. [ 1349.400875][ T8231] hid (null): invalid report_size 6778482 [ 1349.416557][ T8231] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 1349.708407][ T8231] hid-generic 0003:0158:0100.0004: unexpected long global item [ 1349.749433][ T8231] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 1350.928195][ T5237] Bluetooth: hci1: command tx timeout [ 1350.950562][ T8231] usb 3-1: USB disconnect, device number 9 [ 1351.136694][ T62] hsr_slave_0: left promiscuous mode [ 1351.169279][ T62] hsr_slave_1: left promiscuous mode [ 1351.192241][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.199998][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.220333][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.227820][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.583639][ T62] veth1_macvtap: left promiscuous mode [ 1351.635813][ T62] veth0_macvtap: left promiscuous mode [ 1351.802963][ T62] veth1_vlan: left promiscuous mode [ 1352.119994][ T62] veth0_vlan: left promiscuous mode [ 1355.802664][T12464] trusted_key: encrypted_key: insufficient parameters specified [ 1356.197351][T12242] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1356.461746][T12242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.510606][T12242] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.551575][T12242] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1356.571749][T12242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.619723][T12242] usb 4-1: config 0 descriptor?? [ 1356.945520][T12242] ath6kl: Failed to submit usb control message: -71 [ 1356.974753][T12242] ath6kl: unable to send the bmi data to the device: -71 [ 1356.983932][T12242] ath6kl: Unable to send get target info: -71 [ 1357.012251][T12242] ath6kl: Failed to init ath6kl core: -71 [ 1357.024985][T12242] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1357.070223][T12242] usb 4-1: USB disconnect, device number 4 [ 1357.252140][ T29] audit: type=1400 audit(1726554339.885:1334): avc: denied { name_bind } for pid=12466 comm="syz.4.945" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1357.386607][ T29] audit: type=1400 audit(1726554340.025:1335): avc: denied { block_suspend } for pid=12466 comm="syz.4.945" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1357.896193][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1358.088485][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1360.369254][T12479] netlink: 'syz.4.949': attribute type 11 has an invalid length. [ 1360.385035][T12479] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.949'. [ 1361.999215][T12485] ./file0: Can't lookup blockdev [ 1362.015989][T12485] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1362.023923][T12485] #PF: supervisor instruction fetch in kernel mode [ 1362.030441][T12485] #PF: error_code(0x0010) - not-present page [ 1362.036439][T12485] PGD 8000000027757067 P4D 8000000027757067 PUD 7abbe067 PMD 0 [ 1362.044119][T12485] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN PTI [ 1362.050223][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.3.950 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1362.060672][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1362.070755][T12485] RIP: 0010:0x0 [ 1362.074246][T12485] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1362.081713][T12485] RSP: 0018:ffffc900031a7a48 EFLAGS: 00010246 [ 1362.087804][T12485] RAX: 0000000000040000 RBX: ffffea0002ffabc0 RCX: ffffc9000ae4d000 [ 1362.095916][T12485] RDX: 0000000000040000 RSI: ffffea0002ffabc0 RDI: 0000000000000000 [ 1362.103913][T12485] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1362.112089][T12485] R10: 0000000000000000 R11: ffffffff95d83ed0 R12: 1ffff92000634f4a [ 1362.120173][T12485] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0002ffabc0 [ 1362.128166][T12485] FS: 00007f11b7fff6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1362.137125][T12485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1362.143732][T12485] CR2: ffffffffffffffd6 CR3: 0000000028e8a000 CR4: 00000000003506f0 [ 1362.151738][T12485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1362.159731][T12485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1362.167723][T12485] Call Trace: [ 1362.171021][T12485] [ 1362.173973][T12485] ? show_regs+0x8c/0xa0 [ 1362.178360][T12485] ? __die+0x2c/0x80 [ 1362.182322][T12485] ? page_fault_oops+0x3b6/0xb80 [ 1362.187320][T12485] ? __pfx_page_fault_oops+0x10/0x10 [ 1362.192665][T12485] ? mark_held_locks+0x9f/0xe0 [ 1362.197511][T12485] ? do_user_addr_fault+0xa90/0x13f0 [ 1362.202842][T12485] ? rcu_is_watching+0x12/0xc0 [ 1362.207648][T12485] ? exc_page_fault+0x5c/0xc0 [ 1362.212365][T12485] ? asm_exc_page_fault+0x26/0x30 [ 1362.217439][T12485] filemap_read_folio+0xe5/0x2c0 [ 1362.222407][T12485] ? __pfx_filemap_read_folio+0x10/0x10 [ 1362.227984][T12485] ? __filemap_get_folio+0x2a1/0xae0 [ 1362.233301][T12485] do_read_cache_folio+0x203/0x540 [ 1362.238448][T12485] erofs_bread+0x34d/0x7e0 [ 1362.242987][T12485] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1362.248663][T12485] erofs_fc_fill_super+0x2b9/0x2500 [ 1362.253892][T12485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1362.259896][T12485] ? lockdep_init_map_type+0x16d/0x7d0 [ 1362.265392][T12485] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1362.271062][T12485] ? lockdep_init_map_type+0x16d/0x7d0 [ 1362.276569][T12485] ? shrinker_register+0x1a8/0x260 [ 1362.281717][T12485] ? sget_fc+0x808/0xc20 [ 1362.285986][T12485] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1362.291470][T12485] ? __pfx_erofs_fc_fill_super+0x10/0x10 [ 1362.297141][T12485] get_tree_nodev+0xda/0x190 [ 1362.301758][T12485] erofs_fc_get_tree+0x110/0x1a0 [ 1362.306727][T12485] vfs_get_tree+0x8f/0x380 [ 1362.311195][T12485] path_mount+0x14e6/0x1f20 [ 1362.315730][T12485] ? __pfx_path_mount+0x10/0x10 [ 1362.320615][T12485] ? putname+0x12e/0x170 [ 1362.324901][T12485] ? putname+0x12e/0x170 [ 1362.329192][T12485] __x64_sys_mount+0x294/0x320 [ 1362.333987][T12485] ? __pfx___x64_sys_mount+0x10/0x10 [ 1362.339308][T12485] do_syscall_64+0xcd/0x250 [ 1362.343839][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.349773][T12485] RIP: 0033:0x7f11b857def9 [ 1362.354209][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.373846][T12485] RSP: 002b:00007f11b7fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1362.382281][T12485] RAX: ffffffffffffffda RBX: 00007f11b8735f80 RCX: 00007f11b857def9 [ 1362.390270][T12485] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000180 [ 1362.398259][T12485] RBP: 00007f11b85f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1362.406248][T12485] R10: 0000000000004806 R11: 0000000000000246 R12: 0000000000000000 [ 1362.414238][T12485] R13: 0000000000000000 R14: 00007f11b8735f80 R15: 00007ffca41af418 [ 1362.422271][T12485] [ 1362.425304][T12485] Modules linked in: [ 1362.429229][T12485] CR2: 0000000000000000 [ 1362.433399][T12485] ---[ end trace 0000000000000000 ]--- [ 1362.438865][T12485] RIP: 0010:0x0 [ 1362.442347][T12485] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1362.449721][T12485] RSP: 0018:ffffc900031a7a48 EFLAGS: 00010246 [ 1362.455835][T12485] RAX: 0000000000040000 RBX: ffffea0002ffabc0 RCX: ffffc9000ae4d000 [ 1362.463868][T12485] RDX: 0000000000040000 RSI: ffffea0002ffabc0 RDI: 0000000000000000 [ 1362.471860][T12485] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1362.479855][T12485] R10: 0000000000000000 R11: ffffffff95d83ed0 R12: 1ffff92000634f4a [ 1362.487843][T12485] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea0002ffabc0 [ 1362.495837][T12485] FS: 00007f11b7fff6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1362.504796][T12485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1362.511403][T12485] CR2: ffffffffffffffd6 CR3: 0000000028e8a000 CR4: 00000000003506f0 [ 1362.519395][T12485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1362.527384][T12485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1362.535380][T12485] Kernel panic - not syncing: Fatal exception [ 1362.541811][T12485] Kernel Offset: disabled [ 1362.546146][T12485] Rebooting in 86400 seconds..