last executing test programs: 4m24.391336708s ago: executing program 0 (id=265): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {0x0}, {&(0x7f0000002a80)=""/4090, 0xffa}], 0x3}}], 0x1, 0x10000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) 4m21.629610147s ago: executing program 0 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x1f, 0x5, 0x0) r1 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0xcf6, 0x0, 0x0, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r4, &(0x7f0000000000)=""/178, 0xb2) 1m24.313676474s ago: executing program 2 (id=468): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::::/', 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc1485544, &(0x7f0000000080)) ioctl$FBIOBLANK(r0, 0x4611, 0x2) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 1m23.088904408s ago: executing program 2 (id=470): fanotify_init(0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x3201}, 0x10, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m20.943281834s ago: executing program 2 (id=473): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, 0x0) syz_io_uring_setup(0x7adc, &(0x7f0000000240)={0x0, 0x29c5, 0x4, 0x0, 0x81}, &(0x7f00000002c0), &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="93e24a327200"/17, 0x11}, {&(0x7f0000000440)="bcc9b1590200de9e5de63a46ef5d84ff3ca4f7cfd6c5bd0380b5408b61548ab173f26bd12d5f6a4606c67a52f258e7756a7e36bce705c4354564268813be3162244a146c5405f2ab59095babd7559589b1ba33374687a36402408e79ab988edef88fc338", 0x64}, {&(0x7f0000001680)="094fb143daa9baa36aaa2c", 0xb}], 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x81, 0x181, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 1m1.865663487s ago: executing program 2 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000200)={0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m0.719855761s ago: executing program 2 (id=484): creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$kcm(0x10, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 56.525891434s ago: executing program 2 (id=475): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000280), 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, r7, 0x0, 0x7}, 0x38) sendfile(r1, r1, 0x0, 0x401) sendfile(r3, r3, 0x0, 0x3) 44.258672055s ago: executing program 0 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff3d, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x101, &(0x7f0000000100)) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getpid() setfsgid(0x0) socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipmr_delroute={0x24, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x2, 0xfd, 0x2, 0xc8, 0x9, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x4b1b05db}]}, 0x24}}, 0x24048004) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) 42.513593687s ago: executing program 0 (id=493): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="a400000021000f04ff070000fcdbdf250a801401020000020400000008000a000000000014000200ff01000000000000000000000000000114000100fe88000000000000000000000000010114000100fe880000000000000000000000000001050015000100000014000200000000000000000000000000000000011400030076657468305f746f"], 0xa4}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r3, @ANYBLOB="19012abd"], 0x14}}, 0x20000000) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x6, @link_local}, 0x12, {0x2, 0x2, @empty}, 'lo\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010f00000000000000000100000048000280440001800800010000000000080001000000000008000100000000000800010000000000080001000000000004000100000000000800010000000000080001000000000004000180000002800000018000000100000000000000010000000000000001800000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001800000010000000000000001000000"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x9, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000005c0)) 40.640291329s ago: executing program 0 (id=495): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000de5e2e41d92884a9d94489d22177eff1364e93dd0f7d2820a55678e672e798347d3fed434aa96d9285703d9fcafe96a4b4697a7683fe46816c27660e0a033b35752b865d51b2f2982f653e33829bd6ed878baf8a0c9651068a01d548f510994b78c375685d27465e7069630f0dd1f70d91b15e5c28ad3811dfee514c7b269a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r3, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) 39.377757697s ago: executing program 0 (id=497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_open(0x0, 0x40, 0x9c, &(0x7f0000000380)={0x7fffffffffffffff, 0x3, 0x0, 0xfffffffffffffff9}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x400) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='proc\x00', 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 28.443439733s ago: executing program 3 (id=512): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xa3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) chdir(0x0) read$FUSE(r0, &(0x7f0000005cc0)={0x2020}, 0x2020) preadv(r0, &(0x7f00000038c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) 26.515275564s ago: executing program 3 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x20048880) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 25.385737358s ago: executing program 3 (id=516): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x38) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) lseek(r3, 0x101, 0x0) getdents(r3, &(0x7f0000000640)=""/103, 0x67) 24.115221882s ago: executing program 3 (id=517): r0 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x30, r2, 0x107, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048050}, 0x8880) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0xa, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r4 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18bfe76fd59ba081}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1dc, 0x12, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2b, 0x7, 0x5, 0x1, {0x4e23, 0x4e21, [0x47, 0x9, 0xaf, 0x76], [0x8, 0x40, 0x24], r6, [0x4, 0x100]}, 0x4, 0x2d9}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "b441ceedb615d1d4dd84fb80cfaf04f1bd1558ddffcf581e03d01b2ae5fa8889f69c0bee6e9412727de60a83b2c812b0321cbc5fbec4f727f59f942e3500424d6811317a4044aa6a82b7b0ffb76b9372768e4a2836814d4652a68be79e7f305f3dfc11892889d64e01e3627718c4c7789be5f4c6d2b2"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "51f1630bc1065f25d0187a0caf2492772e84e5f913218171fa5873dd51b53bd0d4720c027cdd70059ea34311228e9b71404e2ee6713b452f0fe1557a8cadf7cb5b92e07499029be1a42c4c6da77eb12f30a5049e55bc790c2fe8a01ee2246c0e6a443fcb5c314804bce40b4f07d0450bc4bb13a207090002c0aad33a692a9a059c6a9f4b0d44007cd412f721df6d746f56a8c868adc9edd09b02019748d0f5e08805d230b6935d4f0a4a7eb3b8a74c23ba2256f73c1ab71f965ef650b383be902d3241f591c01cf65fc108111567dae47063"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "01747639a1209a5134b5eeaacd64d03fda04d22e838a48c21d7e9f5f2bb60ecb116fd7c96ebf0165bad0d50d2f5af7c3955a765d72"}]}, 0x1dc}}, 0x810) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES16], 0x0) 17.599901973s ago: executing program 3 (id=522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000000}) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0xfffffffe}, 0x3c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000200)={0x56, 0x7, 0x1, {0x4250, 0xe0}, {0xb9b8, 0x8000}, @period={0x5d, 0x6, 0xfff9, 0x8470, 0x4b16, {0x4, 0x3, 0x8003, 0xb7}, 0x6, &(0x7f0000000180)=[0xfff, 0x8, 0x0, 0x0, 0x7f, 0x1]}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 15.33032779s ago: executing program 3 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x3, 0xa, 0x8, 0x9, 0x3803}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x41, &(0x7f0000000600)=""/65, 0x41000, 0x10, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0xde3adb1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5, r5], &(0x7f0000000700)=[{0x2, 0x2, 0x2, 0x6}], 0x10, 0x6, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 14.13721089s ago: executing program 4 (id=527): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3c0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r0, 0x5608) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffb, 0x0, "81fb08cc2b000000f6c05b7225ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x0, 0x937, 0x0, 0x0, 0x0, "8afbb5a85093ef768ede381361ce675f4362d2"}) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) 12.588248665s ago: executing program 4 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r2, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{}], {}, [], {0x10, 0x6}}, 0x2c, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r5, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 11.476607411s ago: executing program 4 (id=531): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) getrusage(0x0, &(0x7f0000000740)) 8.15117782s ago: executing program 4 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 8.052752924s ago: executing program 1 (id=533): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x82561000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x4000000, &(0x7f0000000540)={0x0, 0x617, 0x12, 0x3, 0x382}, &(0x7f00000002c0), 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) 7.021698369s ago: executing program 4 (id=534): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r1], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 5.868453099s ago: executing program 1 (id=535): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x56, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6c, @void, @value}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2000, 0x0) 4.256249347s ago: executing program 4 (id=537): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) dup(r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) 4.145663457s ago: executing program 1 (id=538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x11) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x27, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) clock_gettime(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000780), 0x83, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000480)={0x12, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) 3.060000155s ago: executing program 1 (id=539): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001900)={0x77359400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007700)={0x2020}, 0x2020) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') write$selinux_access(r0, &(0x7f0000001680)={'system_u:object_r:auditd_log_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x46) 1.648335613s ago: executing program 1 (id=540): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'veth0_macvtap\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x1b8, 0x0, 0x0, 0x420, 0x1b8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x3}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'dvmrp0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], 'netdevsim0\x00', 'erspan0\x00', {}, {0xff}, 0x26, 0xc8, 0x1, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x101], 0x2000}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8684, @ipv4=@local, 0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) 0s ago: executing program 1 (id=541): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg(r3, 0x0, 0x40090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) kernel console output (not intermixed with test programs): 6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.494395][ T6479] bridge_slave_0: entered allmulticast mode [ 283.408064][ T5237] Bluetooth: hci1: command tx timeout [ 283.409308][ T6479] bridge_slave_0: entered promiscuous mode [ 283.530652][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.562992][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.621268][ T6479] bridge_slave_1: entered allmulticast mode [ 283.658380][ T6479] bridge_slave_1: entered promiscuous mode [ 284.103664][ T6534] syz.4.248[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.103851][ T6534] syz.4.248[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.116412][ T6534] syz.4.248[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.269725][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 285.497940][ T5237] Bluetooth: hci1: command tx timeout [ 285.539279][ T29] audit: type=1400 audit(1727407669.267:388): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 285.680423][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.701106][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.615768][ T29] audit: type=1400 audit(1727407670.347:389): avc: denied { name_connect } for pid=6538 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 286.808713][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 286.843297][ T29] audit: type=1400 audit(1727407670.487:390): avc: denied { create } for pid=6547 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 286.942781][ T29] audit: type=1400 audit(1727407670.517:391): avc: denied { nlmsg_read } for pid=6538 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.966583][ T6479] team0: Port device team_slave_0 added [ 286.989145][ T6555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 286.996154][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 287.017531][ T6479] team0: Port device team_slave_1 added [ 287.097766][ T6556] vhci_hcd: connection closed [ 287.101934][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 287.161132][ T2588] vhci_hcd: stop threads [ 287.212760][ T2588] vhci_hcd: release socket [ 287.242919][ T2588] vhci_hcd: disconnect device [ 287.299649][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.538529][ T29] audit: type=1400 audit(1727407671.207:392): avc: denied { bind } for pid=6558 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.231465][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.287873][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.457066][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.964089][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.328505][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.335529][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.696989][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.735210][ T6566] bond0: entered promiscuous mode [ 291.357099][ T6566] bond_slave_0: entered promiscuous mode [ 291.363936][ T6566] bond_slave_1: entered promiscuous mode [ 291.890131][ T6570] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 292.716300][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.777951][ T6570] team0: entered promiscuous mode [ 292.783097][ T6570] team_slave_0: entered promiscuous mode [ 292.789503][ T6570] team_slave_1: entered promiscuous mode [ 292.796213][ T6570] bond0: (slave team0): Enslaving as an active interface with an up link [ 292.815356][ T6571] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 292.828423][ T29] audit: type=1400 audit(1727407676.547:393): avc: denied { bind } for pid=6577 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.141192][ T6571] bond0: (slave team0): Releasing backup interface [ 293.149208][ T6571] team0: left promiscuous mode [ 293.154099][ T6571] team_slave_0: left promiscuous mode [ 293.167444][ T6571] team_slave_1: left promiscuous mode [ 293.191074][ T6571] bridge0: port 3(team0) entered blocking state [ 293.837169][ T6571] bridge0: port 3(team0) entered disabled state [ 293.843843][ T6571] team0: entered allmulticast mode [ 293.849498][ T6571] team_slave_0: entered allmulticast mode [ 293.855398][ T6571] team_slave_1: entered allmulticast mode [ 293.950884][ T6571] team0: entered promiscuous mode [ 293.977712][ T6571] team_slave_0: entered promiscuous mode [ 293.984717][ T6571] team_slave_1: entered promiscuous mode [ 294.120031][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.229814][ T6479] hsr_slave_0: entered promiscuous mode [ 294.281768][ T6479] hsr_slave_1: entered promiscuous mode [ 294.339156][ T6479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.556430][ T6479] Cannot create hsr debugfs directory [ 296.171648][ T6609] block device autoloading is deprecated and will be removed. [ 296.375242][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.517827][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 297.910960][ T6612] evm: overlay not supported [ 299.054350][ T11] bridge_slave_1: left allmulticast mode [ 299.060464][ T11] bridge_slave_1: left promiscuous mode [ 299.066278][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.147240][ T11] bridge_slave_0: left allmulticast mode [ 299.153020][ T11] bridge_slave_0: left promiscuous mode [ 299.180732][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.424807][ T6629] input: syz1 as /devices/virtual/input/input8 [ 300.426755][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.449555][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.622957][ T11] bond0 (unregistering): Released all slaves [ 302.071153][ T11] hsr_slave_0: left promiscuous mode [ 302.132247][ T11] hsr_slave_1: left promiscuous mode [ 302.155476][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.172314][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.185093][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.208313][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.291704][ T11] veth1_macvtap: left promiscuous mode [ 302.308315][ T11] veth0_macvtap: left promiscuous mode [ 302.328598][ T11] veth1_vlan: left promiscuous mode [ 302.335762][ T11] veth0_vlan: left promiscuous mode [ 302.348384][ T29] audit: type=1400 audit(1727407686.090:394): avc: denied { write } for pid=6650 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 302.665591][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.688609][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.699929][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.717900][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.852640][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 302.876809][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.047252][ T5233] Bluetooth: hci3: command tx timeout [ 305.409184][ T29] audit: type=1400 audit(1727407689.150:395): avc: denied { getopt } for pid=6683 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 305.465373][ T11] team0 (unregistering): Port device team_slave_1 removed [ 305.582878][ T11] team0 (unregistering): Port device team_slave_0 removed [ 307.357114][ T6691] CIFS: Unable to determine destination address [ 307.736290][ T5233] Bluetooth: hci3: command tx timeout [ 308.677051][ T5282] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 308.888155][ T5282] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 308.948860][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.006045][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.118086][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.183347][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.194831][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.207801][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.218978][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.235064][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.244873][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.253536][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.267363][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.275587][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.284281][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.293898][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.305425][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.314172][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.327087][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.338825][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.338949][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.355649][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.412894][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.424164][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.433324][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.447374][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.477457][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.485732][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.523414][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.563217][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.579035][ T6479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 309.616344][ T5282] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.653312][ T5282] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.682524][ T5282] usb 3-1: Product: syz [ 309.686764][ T5282] usb 3-1: Manufacturer: syz [ 309.717035][ T5282] usb 3-1: SerialNumber: syz [ 309.742748][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.750353][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.767108][ T5237] Bluetooth: hci3: command tx timeout [ 309.817988][ T5282] usb 3-1: config 0 descriptor?? [ 309.847214][ T5282] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 311.233659][ T6479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.264978][ T6479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.299014][ T6479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.412785][ T940] usb 3-1: USB disconnect, device number 2 [ 311.423147][ T940] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 311.824788][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.848035][ T5233] Bluetooth: hci4: command tx timeout [ 311.854391][ T5237] Bluetooth: hci3: command tx timeout [ 312.332032][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.551175][ T6734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 312.564651][ T6737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 312.649360][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.717659][ T6662] chnl_net:caif_netlink_parms(): no params data found [ 312.728078][ T6738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 312.827584][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.961659][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 313.017594][ T6746] netlink: 'syz.2.297': attribute type 15 has an invalid length. [ 313.186496][ T6749] bond_slave_0: entered promiscuous mode [ 313.193013][ T6749] bond_slave_1: entered promiscuous mode [ 313.241604][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.269513][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.285773][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.327324][ T6662] bridge_slave_0: entered allmulticast mode [ 313.365811][ T6662] bridge_slave_0: entered promiscuous mode [ 313.382322][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.391930][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.401026][ T6662] bridge_slave_1: entered allmulticast mode [ 313.414927][ T6662] bridge_slave_1: entered promiscuous mode [ 313.428125][ T6751] bond0: entered promiscuous mode [ 313.896070][ T6755] netlink: 'syz.1.298': attribute type 11 has an invalid length. [ 313.896753][ T6749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.927023][ T5233] Bluetooth: hci4: command tx timeout [ 313.934907][ T6749] bond_slave_0: left promiscuous mode [ 313.973499][ T6749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.000769][ T6749] bond_slave_1: left promiscuous mode [ 314.007174][ T29] audit: type=1400 audit(1727407697.740:396): avc: denied { write } for pid=6753 comm="syz.1.298" name="file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.036447][ T6749] bond0 (unregistering): Released all slaves [ 314.044301][ T29] audit: type=1400 audit(1727407697.740:397): avc: denied { open } for pid=6753 comm="syz.1.298" path="/92/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.316305][ T6662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.382183][ T6662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.528078][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.535801][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.554275][ T6705] bridge_slave_0: entered allmulticast mode [ 314.573882][ T6705] bridge_slave_0: entered promiscuous mode [ 314.588705][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.608340][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.626756][ T6705] bridge_slave_1: entered allmulticast mode [ 314.650154][ T6705] bridge_slave_1: entered promiscuous mode [ 314.729510][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.820159][ T6662] team0: Port device team_slave_0 added [ 314.862808][ T11] bridge_slave_1: left allmulticast mode [ 314.878029][ T11] bridge_slave_1: left promiscuous mode [ 314.886269][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.911304][ T11] bridge_slave_0: left allmulticast mode [ 314.926837][ T11] bridge_slave_0: left promiscuous mode [ 314.932886][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.166072][ T5233] Bluetooth: hci4: command tx timeout [ 316.947949][ T29] audit: type=1400 audit(1727407700.060:398): avc: denied { nlmsg_read } for pid=6766 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 317.837441][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.881030][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.927527][ T11] bond0 (unregistering): Released all slaves [ 318.104211][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.136739][ T6662] team0: Port device team_slave_1 added [ 318.210392][ T2588] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.217598][ T2588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.247423][ T5233] Bluetooth: hci4: command tx timeout [ 318.261342][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.348418][ T6479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.359282][ T6479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.638369][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.647284][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.682065][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.717327][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.778128][ T6662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.707341][ T6705] team0: Port device team_slave_0 added [ 320.735331][ T6705] team0: Port device team_slave_1 added [ 320.764135][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.792654][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.846470][ T6662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.071190][ T29] audit: type=1400 audit(1727407704.700:399): avc: denied { map } for pid=6795 comm="syz.1.306" path="socket:[15475]" dev="sockfs" ino=15475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 321.290544][ T29] audit: type=1400 audit(1727407704.720:400): avc: denied { getopt } for pid=6795 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.270304][ T6662] hsr_slave_0: entered promiscuous mode [ 322.443703][ T6662] hsr_slave_1: entered promiscuous mode [ 322.542543][ T6662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.629483][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.649663][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.047106][ T6662] Cannot create hsr debugfs directory [ 323.252597][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.270420][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.302887][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.463377][ T11] hsr_slave_0: left promiscuous mode [ 323.488673][ T11] hsr_slave_1: left promiscuous mode [ 323.554539][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.580296][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.190597][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.208667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.247243][ T5310] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 325.296137][ T11] veth1_macvtap: left promiscuous mode [ 325.302598][ T11] veth0_macvtap: left promiscuous mode [ 325.316454][ T11] veth1_vlan: left promiscuous mode [ 325.322953][ T11] veth0_vlan: left promiscuous mode [ 325.387160][ T5310] usb 2-1: device descriptor read/64, error -71 [ 325.666192][ T5310] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 325.817077][ T5310] usb 2-1: device descriptor read/64, error -71 [ 325.973690][ T5310] usb usb2-port1: attempt power cycle [ 326.315250][ T11] team0 (unregistering): Port device team_slave_1 removed [ 326.371797][ T5310] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 326.947258][ T5310] usb 2-1: device not accepting address 10, error -71 [ 327.175785][ T11] team0 (unregistering): Port device team_slave_0 removed [ 327.198925][ T6825] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 327.209129][ T6825] overlayfs: missing 'lowerdir' [ 327.534919][ T6827] ceph: No mds server is up or the cluster is laggy [ 330.402151][ T29] audit: type=1400 audit(1727407714.130:401): avc: denied { listen } for pid=6839 comm="syz.2.313" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 330.404283][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.434064][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.466089][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.491569][ T6839] dccp_close: ABORT with 496 bytes unread [ 330.507471][ T29] audit: type=1400 audit(1727407714.170:402): avc: denied { accept } for pid=6839 comm="syz.2.313" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 330.525945][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.558122][ T29] audit: type=1400 audit(1727407714.170:403): avc: denied { write } for pid=6839 comm="syz.2.313" laddr=::ffff:172.20.20.0 lport=20000 faddr=::ffff:172.20.20.10 fport=32896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 330.593748][ T29] audit: type=1400 audit(1727407714.170:404): avc: denied { ioctl } for pid=6839 comm="syz.2.313" path="socket:[14884]" dev="sockfs" ino=14884 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 331.091914][ T6705] hsr_slave_0: entered promiscuous mode [ 331.112396][ T6705] hsr_slave_1: entered promiscuous mode [ 331.155260][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.354959][ T6705] Cannot create hsr debugfs directory [ 332.994591][ T29] audit: type=1400 audit(1727407716.040:405): avc: denied { create } for pid=6851 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 333.076973][ T29] audit: type=1400 audit(1727407716.040:406): avc: denied { sys_admin } for pid=6851 comm="syz.2.316" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 333.509127][ T29] audit: type=1400 audit(1727407717.250:407): avc: denied { getopt } for pid=6858 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.604548][ T6479] veth0_vlan: entered promiscuous mode [ 334.028573][ T6861] mmap: syz.1.318 (6861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 334.155639][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'. [ 334.168308][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'. [ 334.233515][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'. [ 335.807032][ T29] audit: type=1400 audit(1727407718.740:408): avc: denied { map } for pid=6878 comm="syz.1.319" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.299024][ T29] audit: type=1400 audit(1727407718.740:409): avc: denied { execute } for pid=6878 comm="syz.1.319" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.995061][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 338.595906][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.606598][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.617024][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.650057][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.660007][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.667665][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.882934][ T5233] Bluetooth: hci5: unexpected event for opcode 0x202d [ 339.764877][ T6908] syz.1.323 uses obsolete (PF_INET,SOCK_PACKET) [ 339.793174][ T6705] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.982613][ T29] audit: type=1400 audit(1727407723.720:410): avc: denied { ioctl } for pid=6904 comm="syz.1.323" path="socket:[15053]" dev="sockfs" ino=15053 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.080360][ T29] audit: type=1400 audit(1727407723.780:411): avc: denied { read } for pid=6904 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 340.109897][ T6705] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.351658][ T6705] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.566757][ T6705] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.727228][ T5233] Bluetooth: hci1: command tx timeout [ 342.342917][ T29] audit: type=1400 audit(1727407726.060:412): avc: denied { checkpoint_restore } for pid=6920 comm="syz.2.326" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.857101][ T5237] Bluetooth: hci1: command tx timeout [ 343.366385][ T2509] bridge_slave_1: left allmulticast mode [ 343.407222][ T2509] bridge_slave_1: left promiscuous mode [ 343.416120][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.481148][ T2509] bridge_slave_0: left allmulticast mode [ 343.517633][ T2509] bridge_slave_0: left promiscuous mode [ 343.524272][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.750308][ T6961] xt_TCPMSS: Only works on TCP SYN packets [ 344.908381][ T5237] Bluetooth: hci1: command tx timeout [ 345.725155][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.754968][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.776528][ T2509] bond0 (unregistering): Released all slaves [ 345.801139][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 346.019277][ T2509] hsr_slave_0: left promiscuous mode [ 346.077163][ T2509] hsr_slave_1: left promiscuous mode [ 346.101980][ T6981] blktrace: Concurrent blktraces are not allowed on loop3 [ 346.121700][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.169555][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.245290][ T2509] veth0_vlan: left promiscuous mode [ 346.979004][ T5237] Bluetooth: hci1: command tx timeout [ 347.834809][ T29] audit: type=1400 audit(1727407730.850:413): avc: denied { mount } for pid=6982 comm="syz.1.332" name="/" dev="rpc_pipefs" ino=16415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 350.487350][ T29] audit: type=1400 audit(1727407733.220:414): avc: denied { write } for pid=6999 comm="syz.1.336" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 350.514799][ T29] audit: type=1400 audit(1727407733.280:415): avc: denied { create } for pid=6999 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.597110][ T29] audit: type=1400 audit(1727407733.290:416): avc: denied { write } for pid=6999 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.599901][ T2509] team0 (unregistering): Port device team_slave_1 removed [ 350.983230][ T2509] team0 (unregistering): Port device team_slave_0 removed [ 353.360895][ T29] audit: type=1400 audit(1727407737.040:417): avc: denied { execute } for pid=7008 comm="syz.1.338" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 354.133772][ T29] audit: type=1400 audit(1727407737.320:418): avc: denied { connect } for pid=7008 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.560050][ T7013] netlink: 68 bytes leftover after parsing attributes in process `syz.1.339'. [ 354.999871][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 355.145012][ T6662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.185346][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.208478][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.218637][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.351094][ T7018] netlink: 180 bytes leftover after parsing attributes in process `syz.2.340'. [ 356.082084][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.094838][ T6898] bridge_slave_0: entered allmulticast mode [ 356.103328][ T6898] bridge_slave_0: entered promiscuous mode [ 356.112296][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.120873][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.128998][ T6898] bridge_slave_1: entered allmulticast mode [ 356.136548][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.155601][ T6898] bridge_slave_1: entered promiscuous mode [ 356.177626][ T6662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.179839][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.213733][ T6662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.237111][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.261966][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.281173][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.302001][ T9] usb 2-1: Product: syz [ 356.306798][ T9] usb 2-1: Manufacturer: syz [ 356.380125][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 356.386024][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 356.406826][ T6662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.430022][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 356.436773][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 357.489343][ T940] usb 2-1: USB disconnect, device number 12 [ 357.559309][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.652893][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.831167][ T6898] team0: Port device team_slave_0 added [ 357.876333][ T6898] team0: Port device team_slave_1 added [ 357.993584][ T6705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.015685][ T6705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.036260][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.048833][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.077300][ T29] audit: type=1400 audit(1727407741.820:419): avc: denied { bind } for pid=7031 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.097281][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.115657][ T6705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.132339][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.142852][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.169929][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.187308][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 358.216266][ T6705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.344964][ T6898] hsr_slave_0: entered promiscuous mode [ 358.376812][ T6898] hsr_slave_1: entered promiscuous mode [ 358.392990][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.403071][ T6898] Cannot create hsr debugfs directory [ 359.695821][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.738582][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.980793][ T6705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.991473][ T6705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.079340][ T3128] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.086554][ T3128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.271027][ T3128] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.278295][ T3128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.733548][ T6662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.504465][ T6662] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.911988][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.919447][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.197360][ T940] IPVS: starting estimator thread 0... [ 362.223432][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.230677][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.338545][ T7078] IPVS: using max 15 ests per chain, 36000 per kthread [ 362.593380][ T29] audit: type=1400 audit(1727407746.330:420): avc: denied { bind } for pid=7076 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.727856][ T29] audit: type=1400 audit(1727407746.360:421): avc: denied { connect } for pid=7076 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.601463][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.614256][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.625797][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.642549][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.658675][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 363.668578][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.046065][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.767539][ T5237] Bluetooth: hci2: command tx timeout [ 367.194855][ T6898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.208969][ T6898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.221643][ T6898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.250508][ T6898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.273915][ T7127] input: syz0 as /devices/virtual/input/input10 [ 367.407319][ T29] audit: type=1400 audit(1727407751.130:422): avc: denied { read } for pid=7126 comm="syz.2.356" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.455266][ T29] audit: type=1400 audit(1727407751.140:423): avc: denied { open } for pid=7126 comm="syz.2.356" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.654863][ T6705] veth0_vlan: entered promiscuous mode [ 367.706296][ T6705] veth1_vlan: entered promiscuous mode [ 367.847919][ T5237] Bluetooth: hci2: command tx timeout [ 368.018795][ T6705] veth0_macvtap: entered promiscuous mode [ 368.032543][ T6705] veth1_macvtap: entered promiscuous mode [ 368.271495][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.285278][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.298174][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.225100][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.241245][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.253484][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.270713][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.359669][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.470764][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.486552][ T3128] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.494737][ T3128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.551106][ T7148] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 369.563665][ T7148] overlayfs: missing 'lowerdir' [ 369.625663][ T7095] chnl_net:caif_netlink_parms(): no params data found [ 369.826311][ T5304] libceph: connect (1)[c::]:6789 error -101 [ 369.832641][ T5304] libceph: mon0 (1)[c::]:6789 connect error [ 369.887753][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.895368][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.933048][ T5237] Bluetooth: hci2: command tx timeout [ 369.949849][ T7151] ceph: No mds server is up or the cluster is laggy [ 370.117153][ T5304] libceph: connect (1)[c::]:6789 error -101 [ 370.127327][ T5304] libceph: mon0 (1)[c::]:6789 connect error [ 372.128543][ T5233] Bluetooth: hci2: command tx timeout [ 373.850682][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.868209][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.881007][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.890022][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.900794][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.907308][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.926404][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 373.937074][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.957300][ T7095] bridge_slave_0: entered allmulticast mode [ 374.019919][ T7095] bridge_slave_0: entered promiscuous mode [ 374.054726][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.081189][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.098506][ T7095] bridge_slave_1: entered allmulticast mode [ 374.107729][ T7095] bridge_slave_1: entered promiscuous mode [ 374.139244][ T2562] bridge_slave_1: left allmulticast mode [ 374.145003][ T2562] bridge_slave_1: left promiscuous mode [ 374.269207][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.903390][ T2562] bridge_slave_0: left allmulticast mode [ 374.909619][ T2562] bridge_slave_0: left promiscuous mode [ 374.915803][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.463257][ T7193] sg_write: data in/out 74397768/42 bytes for SCSI command 0x0-- guessing data in; [ 375.463257][ T7193] program syz.2.365 not setting count and/or reply_len properly [ 375.648085][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.664771][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.682741][ T2562] bond0 (unregistering): Released all slaves [ 375.748270][ T7095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.805468][ T7095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.940738][ T2562] hsr_slave_0: left promiscuous mode [ 375.953151][ T2562] hsr_slave_1: left promiscuous mode [ 375.964297][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.978017][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.008441][ T5233] Bluetooth: hci3: command tx timeout [ 378.096567][ T5233] Bluetooth: hci3: command tx timeout [ 378.587489][ T29] audit: type=1400 audit(1727407762.320:424): avc: denied { accept } for pid=7208 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.517078][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 379.619397][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 379.810574][ T29] audit: type=1400 audit(1727407763.550:425): avc: denied { wake_alarm } for pid=7215 comm="syz.2.370" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.168101][ T5233] Bluetooth: hci3: command tx timeout [ 381.554809][ T7095] team0: Port device team_slave_0 added [ 381.620072][ T7095] team0: Port device team_slave_1 added [ 381.767816][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.911115][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.926993][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.986966][ T7095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.053791][ T7236] Mount JFS Failure: -22 [ 383.058837][ T7236] jfs_mount failed w/return code = -22 [ 383.139847][ T5233] Bluetooth: hci3: command tx timeout [ 383.278945][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.286095][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.395898][ T7095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.417714][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.433436][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.471684][ T7095] hsr_slave_0: entered promiscuous mode [ 384.488333][ T7095] hsr_slave_1: entered promiscuous mode [ 384.520628][ T7095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.552806][ T7095] Cannot create hsr debugfs directory [ 384.583153][ T29] audit: type=1400 audit(1727407768.320:426): avc: denied { bind } for pid=7245 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 385.178473][ T29] audit: type=1400 audit(1727407768.760:427): avc: denied { listen } for pid=7245 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 385.617871][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 386.213289][ T6898] veth0_vlan: entered promiscuous mode [ 386.228016][ T6898] veth1_vlan: entered promiscuous mode [ 386.253371][ T6898] veth0_macvtap: entered promiscuous mode [ 386.263178][ T6898] veth1_macvtap: entered promiscuous mode [ 386.273831][ T29] audit: type=1400 audit(1727407769.980:428): avc: denied { write } for pid=7265 comm="syz.2.378" name="ptp0" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.281204][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.308438][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.318375][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.329017][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.339146][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.349711][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.359681][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.370359][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.381936][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.392603][ T940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 386.568080][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 386.591768][ T940] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 386.608177][ T940] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 386.623977][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.634979][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.650591][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.655413][ T940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.662450][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.684703][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.688797][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.696466][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.714688][ T940] usb 2-1: Product: syz [ 386.714797][ T940] usb 2-1: Manufacturer: syz [ 386.714827][ T940] usb 2-1: SerialNumber: syz [ 386.732978][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.894994][ T7178] chnl_net:caif_netlink_parms(): no params data found [ 387.020024][ T6898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.030651][ T6898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.041778][ T6898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.051919][ T6898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.229391][ T940] cdc_ncm 2-1:1.0: bind() failure [ 387.259284][ T940] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 387.275793][ T940] cdc_ncm 2-1:1.1: bind() failure [ 387.308165][ T940] usb 2-1: USB disconnect, device number 13 [ 387.815474][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.834295][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.860632][ T7178] bridge_slave_0: entered allmulticast mode [ 387.898146][ T7178] bridge_slave_0: entered promiscuous mode [ 388.541876][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.552224][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.563041][ T7178] bridge_slave_1: entered allmulticast mode [ 389.269293][ T7178] bridge_slave_1: entered promiscuous mode [ 389.810624][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.830536][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.934373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.942483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.345747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.355517][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.380253][ T7178] team0: Port device team_slave_0 added [ 392.547527][ T7178] team0: Port device team_slave_1 added [ 392.657089][ T29] audit: type=1400 audit(1727407776.390:429): avc: denied { bind } for pid=7309 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.721815][ T2562] bridge_slave_1: left allmulticast mode [ 392.731450][ T29] audit: type=1400 audit(1727407776.420:430): avc: denied { setopt } for pid=7309 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.766361][ T2562] bridge_slave_1: left promiscuous mode [ 392.817129][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.870116][ T2562] bridge_slave_0: left allmulticast mode [ 392.876373][ T2562] bridge_slave_0: left promiscuous mode [ 392.940544][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.907947][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.977833][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.061109][ T2562] bond0 (unregistering): Released all slaves [ 394.120723][ T7095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.209095][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.216163][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.396981][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.430757][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.446893][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.459933][ T7327] netlink: 104 bytes leftover after parsing attributes in process `syz.2.385'. [ 394.482357][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.546108][ T7329] netlink: 180 bytes leftover after parsing attributes in process `syz.2.385'. [ 394.660830][ T7095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.794954][ T2562] hsr_slave_0: left promiscuous mode [ 394.857460][ T2562] hsr_slave_1: left promiscuous mode [ 394.898737][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.952058][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.970249][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.081972][ T2562] veth1_macvtap: left promiscuous mode [ 396.112686][ T2562] veth0_macvtap: left promiscuous mode [ 396.147146][ T2562] veth1_vlan: left promiscuous mode [ 396.167216][ T2562] veth0_vlan: left promiscuous mode [ 399.880455][ T5233] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 401.088764][ T7362] netlink: zone id is out of range [ 401.094043][ T7362] netlink: zone id is out of range [ 401.099472][ T7362] netlink: zone id is out of range [ 401.104697][ T7362] netlink: zone id is out of range [ 401.109969][ T7362] netlink: zone id is out of range [ 401.115464][ T7362] netlink: zone id is out of range [ 401.122061][ T7362] netlink: del zone limit has 4 unknown bytes [ 406.985914][ T5286] kernel write not supported for file /uinput (pid: 5286 comm: kworker/0:6) [ 408.169587][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 408.251492][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 408.867628][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 410.664087][ T7095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.897869][ T7095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.938704][ T7178] hsr_slave_0: entered promiscuous mode [ 412.089949][ T7178] hsr_slave_1: entered promiscuous mode [ 412.125427][ T29] audit: type=1400 audit(1727407795.860:431): avc: denied { ioctl } for pid=7410 comm="syz.2.406" path="socket:[18190]" dev="sockfs" ino=18190 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.164636][ T7178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.175368][ T7178] Cannot create hsr debugfs directory [ 413.005118][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.017360][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.036984][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.078126][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.087833][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.125763][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.123181][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.336459][ T2562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.599062][ T2562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.713271][ T2562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.747244][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 414.751780][ T7095] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.028320][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 415.088021][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.101734][ T2562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.125442][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.139164][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.145096][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.154674][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.207088][ T5237] Bluetooth: hci1: command tx timeout [ 415.351020][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.358428][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.582697][ T9] usb 3-1: Product: syz [ 415.587547][ T9] usb 3-1: Manufacturer: syz [ 415.592668][ T9] usb 3-1: SerialNumber: syz [ 415.605780][ T9] usb 3-1: config 0 descriptor?? [ 415.616684][ T7440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 416.610233][ T2562] bridge_slave_1: left allmulticast mode [ 416.616051][ T2562] bridge_slave_1: left promiscuous mode [ 416.644908][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.737465][ T2562] bridge_slave_0: left allmulticast mode [ 416.764483][ T5310] usb 3-1: USB disconnect, device number 3 [ 416.777539][ T2562] bridge_slave_0: left promiscuous mode [ 416.837254][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.290758][ T5237] Bluetooth: hci1: command tx timeout [ 418.766642][ T7474] 9pnet_fd: Insufficient options for proto=fd [ 418.941661][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.027664][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.076412][ T2562] bond0 (unregistering): Released all slaves [ 419.078913][ T5233] Bluetooth: hci4: sending frame failed (-49) [ 419.101159][ T5237] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 419.369435][ T5237] Bluetooth: hci1: command tx timeout [ 419.448095][ T29] audit: type=1400 audit(1727407803.180:432): avc: denied { mount } for pid=7478 comm="syz.2.414" name="/" dev="ramfs" ino=18882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.482930][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 419.492931][ T29] audit: type=1400 audit(1727407803.230:433): avc: denied { mounton } for pid=7478 comm="syz.2.414" path="/91/file0/file1" dev="ramfs" ino=19593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 419.600977][ T29] audit: type=1400 audit(1727407803.340:434): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.831042][ T7178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.864801][ T7178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.241239][ T2562] hsr_slave_0: left promiscuous mode [ 421.007576][ T29] audit: type=1400 audit(1727407804.400:435): avc: denied { ioctl } for pid=7486 comm="syz.2.415" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 421.272524][ T2562] hsr_slave_1: left promiscuous mode [ 421.304834][ T29] audit: type=1400 audit(1727407804.430:436): avc: denied { setcheckreqprot } for pid=7486 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 421.424965][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.453220][ T5237] Bluetooth: hci1: command tx timeout [ 421.482803][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.538569][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.559656][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.574457][ T29] audit: type=1400 audit(1727407805.310:437): avc: denied { append } for pid=7500 comm="syz.2.417" name="nvme-fabrics" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.665180][ T2562] veth1_macvtap: left promiscuous mode [ 421.695694][ T2562] veth0_macvtap: left promiscuous mode [ 421.717282][ T2562] veth1_vlan: left promiscuous mode [ 421.723559][ T2562] veth0_vlan: left promiscuous mode [ 421.736295][ T29] audit: type=1326 audit(1727407805.470:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.2.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1f7d7df39 code=0x0 [ 421.894791][ T29] audit: type=1400 audit(1727407805.630:439): avc: denied { write } for pid=7500 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.917230][ T29] audit: type=1400 audit(1727407806.410:440): avc: denied { write } for pid=7515 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 425.233087][ T29] audit: type=1400 audit(1727407808.620:441): avc: denied { setopt } for pid=7521 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 425.557110][ T29] audit: type=1400 audit(1727407809.240:442): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 428.173427][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.970689][ T4615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.127780][ T4615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.137732][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.145513][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.155071][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.842278][ T29] audit: type=1400 audit(1727407813.580:443): avc: denied { write } for pid=7556 comm="syz.2.424" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.223130][ T29] audit: type=1400 audit(1727407813.580:444): avc: denied { open } for pid=7556 comm="syz.2.424" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 430.417025][ T29] audit: type=1400 audit(1727407814.150:445): avc: denied { mount } for pid=7556 comm="syz.2.424" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 430.463878][ T7560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.918572][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.941653][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.953717][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.968929][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.992644][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 431.003167][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.217200][ T4615] Bluetooth: hci4: command tx timeout [ 431.749788][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 432.388948][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 433.137604][ T4615] Bluetooth: hci6: command tx timeout [ 433.297565][ T4615] Bluetooth: hci4: command tx timeout [ 433.793456][ T29] audit: type=1400 audit(1727407817.530:446): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 435.218777][ T4615] Bluetooth: hci6: command tx timeout [ 435.283700][ T29] audit: type=1400 audit(1727407819.010:447): avc: denied { listen } for pid=7601 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 435.372532][ T4615] Bluetooth: hci4: command tx timeout [ 435.750432][ T5284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 435.780049][ T7605] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 436.089378][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.124907][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.138913][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 436.159032][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.216047][ T5284] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.227138][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.244050][ T7178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.251690][ T29] audit: type=1326 audit(1727407819.980:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.260080][ T5284] usb 3-1: config 0 descriptor?? [ 436.316733][ T29] audit: type=1326 audit(1727407820.030:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.368966][ T29] audit: type=1326 audit(1727407820.030:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.467262][ T29] audit: type=1326 audit(1727407820.030:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.585865][ T29] audit: type=1326 audit(1727407820.030:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.638709][ T29] audit: type=1326 audit(1727407820.030:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.790082][ T29] audit: type=1326 audit(1727407820.030:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.839310][ T5284] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 436.848274][ T5284] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 436.868058][ T5284] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 436.925776][ T29] audit: type=1326 audit(1727407820.030:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 436.964862][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.974899][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.004120][ T7417] bridge_slave_0: entered allmulticast mode [ 437.013427][ T7417] bridge_slave_0: entered promiscuous mode [ 437.027192][ T29] audit: type=1326 audit(1727407820.030:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 437.164557][ T29] audit: type=1326 audit(1727407820.030:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 437.194359][ T5284] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 437.256116][ T5284] usb 3-1: USB disconnect, device number 4 [ 437.307365][ T4615] Bluetooth: hci6: command tx timeout [ 437.389221][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.398245][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.406521][ T7417] bridge_slave_1: entered allmulticast mode [ 437.458926][ T4615] Bluetooth: hci4: command tx timeout [ 437.505032][ T7417] bridge_slave_1: entered promiscuous mode [ 438.449190][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.598292][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.005376][ T7417] team0: Port device team_slave_0 added [ 439.153430][ T7417] team0: Port device team_slave_1 added [ 439.367361][ T4615] Bluetooth: hci6: command tx timeout [ 439.621920][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.655445][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.790857][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.136282][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 440.177414][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.185066][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.237363][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.250149][ T7417] hsr_slave_0: entered promiscuous mode [ 441.620026][ T7417] hsr_slave_1: entered promiscuous mode [ 442.059941][ T7417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.069638][ T7417] Cannot create hsr debugfs directory [ 442.105447][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 442.225536][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 442.225560][ T29] audit: type=1400 audit(1727407825.960:492): avc: denied { ioctl } for pid=7659 comm="syz.2.437" path="socket:[19942]" dev="sockfs" ino=19942 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.460683][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.492498][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.520276][ T7540] bridge_slave_0: entered allmulticast mode [ 442.546936][ T7540] bridge_slave_0: entered promiscuous mode [ 442.675518][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.701184][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.728212][ T7540] bridge_slave_1: entered allmulticast mode [ 442.752861][ T7540] bridge_slave_1: entered promiscuous mode [ 443.110810][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.142670][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.467174][ T29] audit: type=1400 audit(1727407827.200:493): avc: denied { ioctl } for pid=7677 comm="syz.2.438" path="socket:[19979]" dev="sockfs" ino=19979 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 443.641058][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.669291][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.700626][ T7564] bridge_slave_0: entered allmulticast mode [ 443.731709][ T7564] bridge_slave_0: entered promiscuous mode [ 444.059686][ T7540] team0: Port device team_slave_0 added [ 444.125930][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.157661][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.179520][ T7564] bridge_slave_1: entered allmulticast mode [ 444.218122][ T7564] bridge_slave_1: entered promiscuous mode [ 444.311561][ T7540] team0: Port device team_slave_1 added [ 444.391726][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.591487][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.710330][ T29] audit: type=1400 audit(1727407828.450:494): avc: denied { getopt } for pid=7697 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.780341][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.786845][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.102562][ T7564] team0: Port device team_slave_0 added [ 446.128776][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.141404][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.192051][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.344378][ T7564] team0: Port device team_slave_1 added [ 446.559050][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.713292][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.708950][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.125015][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.141709][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.462169][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.049274][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.056373][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.108601][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.209969][ T7540] hsr_slave_0: entered promiscuous mode [ 449.266132][ T7540] hsr_slave_1: entered promiscuous mode [ 449.337337][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.386741][ T7540] Cannot create hsr debugfs directory [ 449.658093][ T7722] netlink: 432 bytes leftover after parsing attributes in process `syz.1.445'. [ 450.412724][ T7564] hsr_slave_0: entered promiscuous mode [ 450.427912][ T7564] hsr_slave_1: entered promiscuous mode [ 450.438289][ T7564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.446277][ T7564] Cannot create hsr debugfs directory [ 452.828503][ T7417] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.107324][ T2562] bridge_slave_1: left allmulticast mode [ 453.113054][ T2562] bridge_slave_1: left promiscuous mode [ 453.127055][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.189479][ T2562] bridge_slave_0: left allmulticast mode [ 453.195564][ T2562] bridge_slave_0: left promiscuous mode [ 453.267152][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.342765][ T2562] bridge_slave_1: left allmulticast mode [ 453.349434][ T2562] bridge_slave_1: left promiscuous mode [ 453.356191][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.359200][ T2562] bridge_slave_0: left allmulticast mode [ 454.398884][ T2562] bridge_slave_0: left promiscuous mode [ 454.468320][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.271411][ T29] audit: type=1400 audit(1727407838.910:495): avc: denied { ioctl } for pid=7748 comm="syz.1.450" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 456.340643][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.825186][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.866313][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.890156][ T2562] bond0 (unregistering): Released all slaves [ 457.028552][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.118034][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.167888][ T2562] bond0 (unregistering): Released all slaves [ 457.194595][ T7417] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.343374][ T7417] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.347880][ T5285] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 457.422183][ T2562] hsr_slave_0: left promiscuous mode [ 457.448667][ T2562] hsr_slave_1: left promiscuous mode [ 457.466664][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.477297][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.505677][ T2562] hsr_slave_0: left promiscuous mode [ 457.520752][ T2562] hsr_slave_1: left promiscuous mode [ 457.531526][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.540700][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.541987][ T5285] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.578891][ T5285] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.625533][ T5285] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.637723][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.661723][ T7771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 457.716626][ T5285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.707571][ T29] audit: type=1400 audit(1727407842.180:496): avc: denied { ioctl } for pid=7772 comm="syz.2.453" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 461.699258][ T29] audit: type=1326 audit(1727407845.430:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.2.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1f7d7df39 code=0x0 [ 461.711635][ T5282] usb 2-1: USB disconnect, device number 14 [ 462.135740][ T29] audit: type=1400 audit(1727407845.870:498): avc: denied { read write } for pid=7789 comm="syz.2.456" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 462.173663][ T29] audit: type=1400 audit(1727407845.900:499): avc: denied { open } for pid=7789 comm="syz.2.456" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 462.262951][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 462.425063][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 462.778925][ T29] audit: type=1400 audit(1727407846.510:500): avc: denied { create } for pid=7789 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 463.006899][ T29] audit: type=1400 audit(1727407846.510:501): avc: denied { write } for pid=7789 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 463.065088][ T29] audit: type=1400 audit(1727407846.520:502): avc: denied { nlmsg_read } for pid=7789 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 465.360747][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 465.418083][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 465.495874][ T7803] Falling back ldisc for ttynull. [ 466.243428][ T7417] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.491544][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.570619][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.757773][ T7417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.768347][ T7417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.843031][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.850248][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.874545][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.881758][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.635410][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.881969][ T7540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.893603][ T7843] slcan: can't register candev [ 472.900821][ T7843] Falling back ldisc for ttyprintk. [ 473.076248][ T7540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.505823][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.523377][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.537426][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.633011][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.647869][ T7540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.830650][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.842022][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.043975][ T7540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.605980][ T7868] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 475.613850][ T7868] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.469'. [ 475.623986][ T7868] netlink: 5 bytes leftover after parsing attributes in process `syz.1.469'. [ 475.786935][ T7872] rdma_op ffff88807a3c01f0 conn xmit_rdma 0000000000000000 [ 476.522039][ T5237] Bluetooth: hci2: command tx timeout [ 476.888781][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.326423][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.746647][ T7564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.829984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.837437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.847455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.854620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.909440][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 477.956591][ T7564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.970732][ T7564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.403634][ T7896] QAT: failed to copy from user cfg_data. [ 478.567060][ T5237] Bluetooth: hci2: command tx timeout [ 479.185536][ T7564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.472609][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.480595][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.490495][ T7848] bridge_slave_0: entered allmulticast mode [ 479.500505][ T7848] bridge_slave_0: entered promiscuous mode [ 479.528512][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.535754][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.552523][ T7848] bridge_slave_1: entered allmulticast mode [ 479.563707][ T7848] bridge_slave_1: entered promiscuous mode [ 479.633093][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.648371][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.672244][ T2562] bridge_slave_1: left allmulticast mode [ 479.678934][ T2562] bridge_slave_1: left promiscuous mode [ 479.685342][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.701444][ T2562] bridge_slave_0: left allmulticast mode [ 479.708290][ T2562] bridge_slave_0: left promiscuous mode [ 479.714091][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.218483][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.233138][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.245857][ T2562] bond0 (unregistering): Released all slaves [ 480.389846][ T7848] team0: Port device team_slave_0 added [ 480.421134][ T2562] hsr_slave_0: left promiscuous mode [ 480.442063][ T2562] hsr_slave_1: left promiscuous mode [ 480.458188][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.469786][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.662747][ T5237] Bluetooth: hci2: command tx timeout [ 481.016246][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 481.093930][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 481.780295][ T7848] team0: Port device team_slave_1 added [ 481.975920][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.985167][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.007415][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.042100][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.058510][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.069314][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.106690][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.167396][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.259149][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.348018][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.356110][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.421858][ T7848] hsr_slave_0: entered promiscuous mode [ 482.456253][ T7848] hsr_slave_1: entered promiscuous mode [ 482.487277][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.494919][ T7848] Cannot create hsr debugfs directory [ 482.527119][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.535163][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.729883][ T5237] Bluetooth: hci2: command tx timeout [ 483.148543][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.172421][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.182652][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.197534][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.208067][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 483.215589][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.903215][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.232299][ T7564] veth0_vlan: entered promiscuous mode [ 484.333862][ T81] bridge_slave_1: left allmulticast mode [ 484.342291][ T81] bridge_slave_1: left promiscuous mode [ 484.348972][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.418806][ T81] bridge_slave_0: left allmulticast mode [ 484.440664][ T81] bridge_slave_0: left promiscuous mode [ 484.446491][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.042237][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.059831][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.071974][ T81] bond0 (unregistering): Released all slaves [ 485.103578][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 485.152479][ T7564] veth1_vlan: entered promiscuous mode [ 485.229014][ T7848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.255131][ T7848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 485.274903][ T81] hsr_slave_0: left promiscuous mode [ 485.287059][ T5237] Bluetooth: hci1: command tx timeout [ 485.298114][ T81] hsr_slave_1: left promiscuous mode [ 485.321116][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.338331][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.699928][ T81] team0 (unregistering): Port device team_slave_1 removed [ 485.764621][ T81] team0 (unregistering): Port device team_slave_0 removed [ 486.479089][ T7848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.490710][ T7848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.655149][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.697103][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.705613][ T7917] bridge_slave_0: entered allmulticast mode [ 486.749711][ T7917] bridge_slave_0: entered promiscuous mode [ 486.830133][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.859822][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.892997][ T7917] bridge_slave_1: entered allmulticast mode [ 486.911526][ T7917] bridge_slave_1: entered promiscuous mode [ 487.015605][ T7564] veth0_macvtap: entered promiscuous mode [ 487.048461][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.085504][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.113615][ T7564] veth1_macvtap: entered promiscuous mode [ 487.241364][ T7917] team0: Port device team_slave_0 added [ 487.252977][ T7917] team0: Port device team_slave_1 added [ 487.279838][ T81] team0: left allmulticast mode [ 487.284796][ T81] team_slave_0: left allmulticast mode [ 487.301407][ T81] team_slave_1: left allmulticast mode [ 487.311380][ T81] team0: left promiscuous mode [ 487.316352][ T81] team_slave_0: left promiscuous mode [ 487.324471][ T81] team_slave_1: left promiscuous mode [ 487.336229][ T81] bridge0: port 3(team0) entered disabled state [ 487.350172][ T81] bridge_slave_1: left allmulticast mode [ 487.367387][ T5237] Bluetooth: hci1: command tx timeout [ 487.375126][ T81] bridge_slave_1: left promiscuous mode [ 487.387762][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.401932][ T81] bridge_slave_0: left allmulticast mode [ 487.415060][ T81] bridge_slave_0: left promiscuous mode [ 487.422051][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.967867][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.977827][ T81] bond_slave_0: left promiscuous mode [ 487.988080][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.998285][ T81] bond_slave_1: left promiscuous mode [ 488.008120][ T81] bond0 (unregistering): Released all slaves [ 488.038661][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.052754][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.063362][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.075177][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.085318][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.096557][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.115011][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.261562][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.305317][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.312786][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.340127][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.358161][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.370484][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.383405][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.395244][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.406194][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.419464][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.432085][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.445582][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.457146][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.487328][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.596699][ T7564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.607406][ T7564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.616384][ T7564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.626478][ T7564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.698846][ T7917] hsr_slave_0: entered promiscuous mode [ 488.706147][ T7917] hsr_slave_1: entered promiscuous mode [ 488.713452][ T7917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.722509][ T7917] Cannot create hsr debugfs directory [ 488.752701][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.781258][ T81] hsr_slave_0: left promiscuous mode [ 488.788297][ T81] hsr_slave_1: left promiscuous mode [ 488.795288][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.804493][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.816055][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.824465][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.854450][ T81] veth1_macvtap: left promiscuous mode [ 488.860586][ T81] veth0_macvtap: left promiscuous mode [ 488.866523][ T81] veth1_vlan: left promiscuous mode [ 488.873591][ T81] veth0_vlan: left promiscuous mode [ 489.457052][ T5237] Bluetooth: hci1: command tx timeout [ 489.617895][ T81] team0 (unregistering): Port device team_slave_1 removed [ 489.695538][ T81] team0 (unregistering): Port device team_slave_0 removed [ 490.581690][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.588916][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.628807][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.636089][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.858230][ T4615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.872581][ T4615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.885761][ T4615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.904168][ T4615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.920881][ T4615] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 490.931004][ T4615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.537438][ T5237] Bluetooth: hci1: command tx timeout [ 492.013055][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.059914][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.150948][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.178324][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 492.269700][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.314613][ T7917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 492.393033][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.413959][ T7917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 492.467550][ T7917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 492.480592][ T7917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 492.492786][ T7848] veth0_vlan: entered promiscuous mode [ 492.523739][ T7848] veth1_vlan: entered promiscuous mode [ 492.647849][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.655979][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.671488][ T7966] bridge_slave_0: entered allmulticast mode [ 492.680125][ T7966] bridge_slave_0: entered promiscuous mode [ 492.727536][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.736762][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.745484][ T7966] bridge_slave_1: entered allmulticast mode [ 492.754457][ T7966] bridge_slave_1: entered promiscuous mode [ 492.862006][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.882863][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.895867][ T7848] veth0_macvtap: entered promiscuous mode [ 492.905266][ T81] bridge_slave_1: left allmulticast mode [ 492.913068][ T81] bridge_slave_1: left promiscuous mode [ 492.919462][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.936318][ T81] bridge_slave_0: left allmulticast mode [ 492.942496][ T81] bridge_slave_0: left promiscuous mode [ 492.949947][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.047226][ T5237] Bluetooth: hci3: command tx timeout [ 493.523594][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.550785][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.564358][ T81] bond0 (unregistering): Released all slaves [ 493.652895][ T7848] veth1_macvtap: entered promiscuous mode [ 493.715008][ T7966] team0: Port device team_slave_0 added [ 493.729941][ T81] hsr_slave_0: left promiscuous mode [ 493.736384][ T81] hsr_slave_1: left promiscuous mode [ 493.743512][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.751335][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.761929][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.770622][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.803822][ T81] veth1_macvtap: left promiscuous mode [ 493.810906][ T81] veth0_macvtap: left promiscuous mode [ 493.817306][ T81] veth1_vlan: left promiscuous mode [ 493.823399][ T81] veth0_vlan: left promiscuous mode [ 494.552301][ T81] team0 (unregistering): Port device team_slave_1 removed [ 494.640001][ T81] team0 (unregistering): Port device team_slave_0 removed [ 495.127770][ T5237] Bluetooth: hci3: command tx timeout [ 495.334129][ T7966] team0: Port device team_slave_1 added [ 495.419098][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.426123][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.454061][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.482047][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.493661][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.503936][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.515801][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.531538][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.556507][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.567466][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.598641][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.684374][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.697377][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.709669][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.721569][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.733366][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.777356][ T7966] hsr_slave_0: entered promiscuous mode [ 495.783978][ T7966] hsr_slave_1: entered promiscuous mode [ 495.835625][ T7848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.845412][ T7848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.875428][ T7848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.884605][ T7848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.943165][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.107794][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.239732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.246985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.295335][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.302563][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.362927][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.387054][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.525262][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.568600][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.683320][ T5237] Bluetooth: hci3: command tx timeout [ 497.961612][ T7966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.985887][ T7966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.211636][ T7966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.979079][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 498.993343][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 499.500847][ T8021] can0: slcan on ttyprintk. [ 499.869555][ T5237] Bluetooth: hci3: command tx timeout [ 501.183640][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.427964][ T8013] can0 (unregistered): slcan off ttyprintk. [ 502.434248][ T7966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.841577][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.870083][ T7966] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.936594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.943862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.970517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.977769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.134316][ T29] audit: type=1400 audit(1727407889.200:503): avc: denied { accept } for pid=8027 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 506.482767][ T8045] capability: warning: `syz.3.479' uses deprecated v2 capabilities in a way that may be insecure [ 506.892985][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.902400][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.275892][ T7917] veth0_vlan: entered promiscuous mode [ 507.362817][ T7917] veth1_vlan: entered promiscuous mode [ 507.435907][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.126619][ T7917] veth0_macvtap: entered promiscuous mode [ 508.539538][ T7917] veth1_macvtap: entered promiscuous mode [ 508.970958][ T7966] veth0_vlan: entered promiscuous mode [ 509.438354][ T7966] veth1_vlan: entered promiscuous mode [ 509.697315][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.722669][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.754781][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.813470][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.834897][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.845563][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.864154][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.907905][ T7966] veth0_macvtap: entered promiscuous mode [ 509.917715][ T7966] veth1_macvtap: entered promiscuous mode [ 509.942241][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.956878][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.586895][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.606856][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.626974][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.659706][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.669903][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.680712][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.692412][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.788207][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.817165][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.827820][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.839613][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.857118][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.869155][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.882572][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.922124][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.936106][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.976743][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.076865][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.108067][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.120728][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.132130][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.158671][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.203869][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.253893][ T7966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.543212][ T7966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.553453][ T7966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.564393][ T7966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.221404][ T7917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.231372][ T7917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.245171][ T7917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.265689][ T7917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.047856][ T29] audit: type=1400 audit(1727407896.720:504): avc: denied { ioctl } for pid=8093 comm="syz.1.489" path="socket:[23685]" dev="sockfs" ino=23685 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 513.625422][ T4615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.640435][ T4615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.658129][ T4615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.834565][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.852391][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.860609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.868088][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.875691][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.883851][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.925392][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.963097][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 514.628965][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.617535][ T29] audit: type=1400 audit(1727407899.350:505): avc: denied { read write } for pid=8113 comm="syz.0.289" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 515.644411][ T29] audit: type=1400 audit(1727407899.350:506): avc: denied { open } for pid=8113 comm="syz.0.289" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 515.814353][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.992927][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.049044][ T8123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8123 comm=syz.0.493 [ 517.078139][ T29] audit: type=1400 audit(1727407900.820:507): avc: denied { read } for pid=8122 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 517.121925][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.228781][ T4615] Bluetooth: hci4: command tx timeout [ 517.359201][ T8123] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 517.483678][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.631700][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.493'. [ 517.995467][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.360479][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.544138][ T8143] input: syz0 as /devices/virtual/input/input11 [ 519.608074][ T4615] Bluetooth: hci4: command tx timeout [ 521.242910][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 521.819591][ T4615] Bluetooth: hci4: command tx timeout [ 521.834972][ T8164] netlink: 104 bytes leftover after parsing attributes in process `syz.0.497'. [ 522.170264][ T29] audit: type=1400 audit(1727407905.670:508): avc: denied { write } for pid=8156 comm="syz.1.499" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 523.987429][ T4615] Bluetooth: hci4: command tx timeout [ 524.518701][ T12] bridge_slave_1: left allmulticast mode [ 524.524450][ T12] bridge_slave_1: left promiscuous mode [ 525.117367][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.172403][ T12] bridge_slave_0: left allmulticast mode [ 525.179365][ T12] bridge_slave_0: left promiscuous mode [ 525.190706][ T29] audit: type=1400 audit(1727407908.930:509): avc: denied { create } for pid=8180 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 525.194689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.361576][ T29] audit: type=1400 audit(1727407909.100:510): avc: denied { name_bind } for pid=8185 comm="syz.3.504" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 526.840912][ T8194] capability: warning: `syz.3.506' uses 32-bit capabilities (legacy support in use) [ 527.140404][ T8184] lo speed is unknown, defaulting to 1000 [ 527.140547][ T8184] lo speed is unknown, defaulting to 1000 [ 527.144764][ T8184] lo speed is unknown, defaulting to 1000 [ 527.150557][ T8184] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 527.157876][ T8184] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 527.185699][ T8184] lo speed is unknown, defaulting to 1000 [ 527.187403][ T8184] lo speed is unknown, defaulting to 1000 [ 527.188631][ T8184] lo speed is unknown, defaulting to 1000 [ 527.189805][ T8184] lo speed is unknown, defaulting to 1000 [ 527.191190][ T8184] lo speed is unknown, defaulting to 1000 [ 527.193813][ T8184] lo speed is unknown, defaulting to 1000 [ 527.195913][ T8184] lo speed is unknown, defaulting to 1000 [ 527.330499][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.330587][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.330789][ T8103] bridge_slave_0: entered allmulticast mode [ 527.347054][ T8103] bridge_slave_0: entered promiscuous mode [ 527.388726][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.388809][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.389013][ T8103] bridge_slave_1: entered allmulticast mode [ 527.396971][ T8103] bridge_slave_1: entered promiscuous mode [ 527.652193][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.967575][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.342084][ T8221] Bluetooth: hci5: Frame reassembly failed (-84) [ 529.936151][ T8103] team0: Port device team_slave_0 added [ 529.977363][ T29] audit: type=1400 audit(1727407913.020:511): avc: denied { create } for pid=8213 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 530.042526][ T8103] team0: Port device team_slave_1 added [ 530.114266][ T29] audit: type=1400 audit(1727407913.020:512): avc: denied { ioctl } for pid=8213 comm="syz.4.509" path="socket:[23798]" dev="sockfs" ino=23798 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 531.659755][ T4615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 531.845875][ T4615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 531.967003][ T8234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 531.989413][ T8234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 531.999959][ T8234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 532.001083][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.007911][ T8234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 532.011882][ T8234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.017505][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.061241][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.173383][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.380770][ T29] audit: type=1400 audit(1727407916.120:513): avc: denied { bind } for pid=8241 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 533.243548][ T29] audit: type=1400 audit(1727407916.960:514): avc: denied { node_bind } for pid=8241 comm="syz.1.513" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 533.766489][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.766745][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.767405][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.507942][ T8234] Bluetooth: hci6: command tx timeout [ 534.531781][ T8231] lo speed is unknown, defaulting to 1000 [ 534.856147][ T12] hsr_slave_0: left promiscuous mode [ 534.917035][ T12] hsr_slave_1: left promiscuous mode [ 534.942604][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.970254][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.014466][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.042358][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.229854][ T12] veth1_macvtap: left promiscuous mode [ 535.235485][ T12] veth0_macvtap: left promiscuous mode [ 535.256992][ T12] veth1_vlan: left promiscuous mode [ 535.277856][ T12] veth0_vlan: left promiscuous mode [ 535.717076][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 535.980600][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 536.024734][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 536.108087][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 536.197150][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 536.238413][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 536.294013][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.330970][ T9] usb 4-1: Product: syz [ 536.335938][ T9] usb 4-1: Manufacturer: syz [ 536.342235][ T9] usb 4-1: SerialNumber: syz [ 536.388487][ T9] usb 4-1: config 0 descriptor?? [ 536.440471][ T9] iguanair 4-1:0.0: failed to submit urb: -90 [ 536.469761][ T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 536.567322][ T5237] Bluetooth: hci6: command tx timeout [ 538.094241][ T12] team0 (unregistering): Port device team_slave_1 removed [ 538.193380][ T12] team0 (unregistering): Port device team_slave_0 removed [ 538.548551][ T8277] slcan: can't register candev [ 538.555766][ T8277] Falling back ldisc for ttyprintk. [ 538.647004][ T5237] Bluetooth: hci6: command tx timeout [ 540.447633][ T8103] hsr_slave_0: entered promiscuous mode [ 540.495165][ T8103] hsr_slave_1: entered promiscuous mode [ 540.583816][ T8103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.618794][ T8103] Cannot create hsr debugfs directory [ 540.739319][ T5237] Bluetooth: hci6: command tx timeout [ 540.758160][ T25] usb 4-1: USB disconnect, device number 2 [ 541.266889][ T29] audit: type=1400 audit(1727407924.980:515): avc: denied { read } for pid=8311 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 541.563268][ T8324] nbd: must specify a device to reconfigure [ 544.420458][ T8339] syz.4.526 (8339) used greatest stack depth: 20080 bytes left [ 546.223007][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.327735][ T29] audit: type=1400 audit(1727407930.040:516): avc: denied { getopt } for pid=8349 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.498358][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.516276][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 547.029122][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.497366][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.410787][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.470486][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.486533][ T8231] bridge_slave_0: entered allmulticast mode [ 551.496051][ T8231] bridge_slave_0: entered promiscuous mode [ 551.520836][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.532035][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.554906][ T8231] bridge_slave_1: entered allmulticast mode [ 551.649419][ T8231] bridge_slave_1: entered promiscuous mode [ 551.896540][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.752127][ T29] audit: type=1326 audit(1727407935.820:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 552.815066][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.885433][ T29] audit: type=1326 audit(1727407935.820:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 553.183611][ T29] audit: type=1326 audit(1727407935.830:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 553.212912][ T29] audit: type=1326 audit(1727407935.830:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 554.054336][ T29] audit: type=1326 audit(1727407935.830:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 554.227058][ T29] audit: type=1326 audit(1727407935.830:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 554.464198][ T29] audit: type=1326 audit(1727407935.830:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 554.520956][ T29] audit: type=1326 audit(1727407935.830:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7d77df39 code=0x7ffc0000 [ 554.555412][ T29] audit: type=1400 audit(1727407937.470:525): avc: denied { map } for pid=8387 comm="syz.1.535" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 554.581931][ T8231] team0: Port device team_slave_0 added [ 555.094883][ T8231] team0: Port device team_slave_1 added [ 555.661303][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.674106][ T29] audit: type=1400 audit(1727407939.360:526): avc: denied { mounton } for pid=8412 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 555.714790][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.799391][ T8234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.833035][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.862915][ T8234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.881433][ T8103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.895449][ T8234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.034432][ T8234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.063875][ T12] bridge_slave_1: left allmulticast mode [ 557.076846][ T12] bridge_slave_1: left promiscuous mode [ 557.083169][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.328540][ T8234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 557.337207][ T8234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.355020][ T12] bridge_slave_0: left allmulticast mode [ 557.362032][ T12] bridge_slave_0: left promiscuous mode [ 557.415635][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.694011][ T8423] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 664.196733][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 664.203970][ C1] rcu: 0-...!: (3 ticks this GP) idle=5e24/1/0x4000000000000000 softirq=35489/35489 fqs=5 [ 664.215956][ C1] rcu: (detected by 1, t=10504 jiffies, g=40985, q=366 ncpus=2) [ 664.223763][ C1] Sending NMI from CPU 1 to CPUs 0: [ 664.223802][ C0] NMI backtrace for cpu 0 [ 664.223829][ C0] CPU: 0 UID: 0 PID: 8429 Comm: syz.1.541 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 664.223860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 664.223877][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 664.223916][ C0] Code: 29 1c 8e e8 42 66 4b 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 eb fc 90 7e e8 fe 03 ad 09 48 c7 c3 28 [ 664.223942][ C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000046 [ 664.223973][ C0] RAX: 0000000080010002 RBX: ffff8880b862cac0 RCX: ffffffff817a1b6e [ 664.223991][ C0] RDX: ffff88802a649e00 RSI: ffffffff817a1dc7 RDI: 0000000000000001 [ 664.224009][ C0] RBP: ffff88805e8c7340 R08: 0000000000000001 R09: 0000000000000000 [ 664.224026][ C0] R10: 0000000000000001 R11: ffffffff8b6f8260 R12: 0000000000000001 [ 664.224042][ C0] R13: 000000000003dbcc R14: 0000000000000000 R15: ffffffff892f6b60 [ 664.224060][ C0] FS: 00007fef7d1ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 664.224086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.224105][ C0] CR2: 00007fafb5c82a40 CR3: 000000007d8ca000 CR4: 00000000003506f0 [ 664.224122][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 664.224139][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 664.224156][ C0] Call Trace: [ 664.224165][ C0] [ 664.224176][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 664.224224][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 664.224262][ C0] ? nmi_handle+0x1a9/0x5c0 [ 664.224288][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 664.224319][ C0] ? default_do_nmi+0x6a/0x160 [ 664.224354][ C0] ? exc_nmi+0x170/0x1e0 [ 664.224388][ C0] ? end_repeat_nmi+0xf/0x53 [ 664.224414][ C0] ? __pfx_advance_sched+0x10/0x10 [ 664.224456][ C0] ? enqueue_hrtimer+0x8e/0x3c0 [ 664.224497][ C0] ? enqueue_hrtimer+0x2e7/0x3c0 [ 664.224538][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 664.224569][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 664.224601][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 664.224632][ C0] [ 664.224640][ C0] [ 664.224648][ C0] enqueue_hrtimer+0x2ec/0x3c0 [ 664.224689][ C0] __hrtimer_run_queues+0xaac/0xcc0 [ 664.224735][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 664.224778][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 664.224816][ C0] hrtimer_interrupt+0x31b/0x800 [ 664.224848][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 664.224877][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 664.224921][ C0] [ 664.224928][ C0] [ 664.224937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 664.224990][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 664.225034][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 a4 47 f6 48 89 df e8 de 21 48 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 47 39 f6 65 8b 05 f6 86 e1 74 85 c0 74 16 5b [ 664.225060][ C0] RSP: 0018:ffffc9000410f7f8 EFLAGS: 00000246 [ 664.225080][ C0] RAX: 0000000000000002 RBX: ffff88807e958f40 RCX: 1ffffffff2dcb534 [ 664.225098][ C0] RDX: 0000000000000000 RSI: ffffffff8b6ccc40 RDI: ffffffff8bd196e0 [ 664.225116][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff2dc2b9d [ 664.225134][ C0] R10: ffffffff96e15cef R11: ffff8880b8728a40 R12: 0000000000000002 [ 664.225152][ C0] R13: ffff88807e958f80 R14: ffff88807e958928 R15: ffff88807e958da8 [ 664.225180][ C0] __unix_dgram_recvmsg+0x32a/0xe50 [ 664.225214][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 664.225244][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 664.225290][ C0] ? find_held_lock+0x2d/0x110 [ 664.225322][ C0] ? __might_fault+0x13b/0x190 [ 664.225355][ C0] ? __pfx_lock_release+0x10/0x10 [ 664.225396][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 664.225426][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 664.225458][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 664.225492][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 664.225534][ C0] ___sys_recvmsg+0x115/0x1a0 [ 664.225572][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 664.225610][ C0] ? find_held_lock+0x2d/0x110 [ 664.225647][ C0] ? __pfx___might_resched+0x10/0x10 [ 664.225675][ C0] ? __might_fault+0xe3/0x190 [ 664.225708][ C0] do_recvmmsg+0x2ba/0x750 [ 664.225746][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 664.225786][ C0] ? __pfx_lock_release+0x10/0x10 [ 664.225827][ C0] ? do_futex+0x123/0x350 [ 664.225863][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 664.225895][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 664.225935][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 664.225988][ C0] do_syscall_64+0xcd/0x250 [ 664.226017][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.226059][ C0] RIP: 0033:0x7fef7d77df39 [ 664.226080][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.226105][ C0] RSP: 002b:00007fef7d1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 664.226130][ C0] RAX: ffffffffffffffda RBX: 00007fef7d936058 RCX: 00007fef7d77df39 [ 664.226148][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 664.226165][ C0] RBP: 00007fef7d7f0216 R08: 0000000000000000 R09: 0000000000000000 [ 664.226182][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 664.226199][ C0] R13: 0000000000000000 R14: 00007fef7d936058 R15: 00007fff719910d8 [ 664.226224][ C0] [ 664.226796][ C1] rcu: rcu_preempt kthread starved for 10485 jiffies! g40985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 664.775414][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 664.785426][ C1] rcu: RCU grace-period kthread stack dump: [ 664.791345][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 664.803191][ C1] Call Trace: [ 664.806507][ C1] [ 664.809477][ C1] __schedule+0xed6/0x5920 [ 664.813959][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 664.819243][ C1] ? __pfx___schedule+0x10/0x10 [ 664.824157][ C1] ? schedule+0x298/0x350 [ 664.828551][ C1] ? __pfx_lock_release+0x10/0x10 [ 664.833812][ C1] ? __pfx___mod_timer+0x10/0x10 [ 664.838813][ C1] ? lock_acquire+0x1b1/0x560 [ 664.843638][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 664.849165][ C1] schedule+0xe7/0x350 [ 664.853300][ C1] schedule_timeout+0x136/0x2a0 [ 664.858207][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 664.863665][ C1] ? __pfx_process_timeout+0x10/0x10 [ 664.869035][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 664.874907][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 664.880417][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 664.885249][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 664.890596][ C1] ? rcu_gp_init+0xc82/0x1630 [ 664.895357][ C1] ? _raw_spin_unlock_irq+0x44/0x50 [ 664.900622][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 664.906493][ C1] rcu_gp_kthread+0x271/0x380 [ 664.911240][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 664.916503][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 664.921750][ C1] ? __kthread_parkme+0x148/0x220 [ 664.926827][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 664.932087][ C1] kthread+0x2c1/0x3a0 [ 664.936214][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 664.941480][ C1] ? __pfx_kthread+0x10/0x10 [ 664.946125][ C1] ret_from_fork+0x45/0x80 [ 664.950602][ C1] ? __pfx_kthread+0x10/0x10 [ 664.955244][ C1] ret_from_fork_asm+0x1a/0x30 [ 664.960174][ C1] [ 664.963236][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 664.969585][ C1] CPU: 1 UID: 0 PID: 2933 Comm: kworker/u8:10 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 664.980218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 664.990316][ C1] Workqueue: events_unbound toggle_allocation_gate [ 664.996898][ C1] RIP: 0010:smp_call_function_many_cond+0x485/0x12c0 [ 665.003727][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 6d 21 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 06 0c 00 00 8b 43 08 31 [ 665.023388][ C1] RSP: 0018:ffffc90009a27990 EFLAGS: 00000293 [ 665.029498][ C1] RAX: 0000000000000000 RBX: ffff8880b8646b80 RCX: ffffffff8180d079 [ 665.037510][ C1] RDX: ffff88802f820000 RSI: ffffffff8180d053 RDI: 0000000000000005 [ 665.045520][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 665.053622][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d71 [ 665.061715][ C1] R13: 0000000000000001 R14: ffff8880b8646b88 R15: ffff8880b8740100 [ 665.069727][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 665.078699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.085323][ C1] CR2: 0000001b32b0fff8 CR3: 000000000df7c000 CR4: 00000000003506f0 [ 665.093336][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.101348][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.109360][ C1] Call Trace: [ 665.112669][ C1] [ 665.115545][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 665.121965][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 665.127218][ C1] ? rcu_sched_clock_irq+0x23b7/0x32a0 [ 665.132745][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 665.138425][ C1] ? __asan_memcpy+0x3c/0x60 [ 665.143078][ C1] ? __asan_memcpy+0x3c/0x60 [ 665.147762][ C1] ? update_process_times+0x178/0x220 [ 665.153194][ C1] ? __pfx_update_process_times+0x10/0x10 [ 665.158982][ C1] ? update_wall_time+0x1c/0x40 [ 665.163891][ C1] ? tick_nohz_handler+0x376/0x530 [ 665.169057][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 665.174583][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 665.180130][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 665.185924][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 665.192057][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 665.197232][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 665.203533][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 665.209404][ C1] [ 665.212379][ C1] [ 665.215367][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.221666][ C1] ? smp_call_function_many_cond+0x4a9/0x12c0 [ 665.227842][ C1] ? smp_call_function_many_cond+0x483/0x12c0 [ 665.233990][ C1] ? smp_call_function_many_cond+0x485/0x12c0 [ 665.240152][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 665.245244][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 665.250421][ C1] text_poke_bp_batch+0x22b/0x760 [ 665.255499][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 665.261717][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 665.267316][ C1] ? __jump_label_patch+0x1db/0x400 [ 665.272576][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 665.278882][ C1] text_poke_finish+0x30/0x40 [ 665.283609][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 665.289659][ C1] jump_label_update+0x1d7/0x400 [ 665.294679][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 665.300652][ C1] static_key_enable+0x1a/0x20 [ 665.305488][ C1] toggle_allocation_gate+0xfc/0x260 [ 665.310933][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 665.316909][ C1] process_one_work+0x9c5/0x1ba0 [ 665.321924][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 665.327011][ C1] ? __pfx_process_one_work+0x10/0x10 [ 665.332455][ C1] ? assign_work+0x1a0/0x250 [ 665.337195][ C1] worker_thread+0x6c8/0xf00 [ 665.341967][ C1] ? __pfx_worker_thread+0x10/0x10 [ 665.347158][ C1] kthread+0x2c1/0x3a0 [ 665.351295][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.356754][ C1] ? __pfx_kthread+0x10/0x10 [ 665.361401][ C1] ret_from_fork+0x45/0x80 [ 665.365884][ C1] ? __pfx_kthread+0x10/0x10 [ 665.370635][ C1] ret_from_fork_asm+0x1a/0x30 [ 665.375493][ C1]