last executing test programs: 33.836090445s ago: executing program 3 (id=141): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xe00, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 33.579095323s ago: executing program 3 (id=143): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x3, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001300)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x4008014) 31.472042439s ago: executing program 3 (id=153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a00000000000000000000000000000000006401010000000000000000000000000069d4d7e5"], 0x38}}, 0x48c0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = gettid() setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x10}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 30.249449147s ago: executing program 3 (id=158): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffb, @local, 0x6}, r2}}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8d0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 29.103333706s ago: executing program 3 (id=165): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf"], 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000140)={0x3, 0x100, 0x200, 0x9, 0x2, 0x3524}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000005000000020010000000000000100000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 28.544014919s ago: executing program 3 (id=166): socket$netlink(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) 15.474319078s ago: executing program 0 (id=209): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r0 = socket$inet(0x2, 0x3, 0x4) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xa9924ee2c49d3042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x2, 0x80805, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x800000) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x8000, &(0x7f0000000300)={0xa, 0x4e20, 0x800000, @mcast1}, 0xffffffb0) prctl$PR_SET_NO_NEW_PRIVS(0x34, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r7, &(0x7f0000000040)="240000001a005f0214f9f507000909000a00000000000000000000000800020000000000", 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x412}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mincore(&(0x7f0000e94000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/101) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) 14.283828027s ago: executing program 0 (id=210): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = io_uring_setup(0x2c93, 0x0) io_uring_enter(r4, 0x0, 0xcb, 0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='+U', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf251400000005000b000100000008000300080000000500190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc814}, 0x8881) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x8140) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000300)={0x6, 0x1, 'client0\x00', 0x0, "743e84e12d556f1c", "2f148d12a7da4af88c9b8491314393d442c6029542e42f2fed39bc86dce93340", 0x1, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000040000000900000000000000", @ANYBLOB="00000000000000008c711dace484ab6e917329f9cb740000000000000400000000007d2630e312cd7472c2242710", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 13.351242807s ago: executing program 32 (id=166): socket$netlink(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) 13.317646161s ago: executing program 0 (id=213): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) unshare(0x22020600) r2 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r2, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r3, 0x4, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000000)=ANY=[@ANYRESHEX]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() write$P9_RWALK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x30) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f00)=""/4104, 0x1008) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0xd, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 9.420131672s ago: executing program 0 (id=221): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020be73f043c0100000000000000430000000800", @ANYRES32=0x0, @ANYBLOB="00ed0000008b06e0000020000000bdb436140b005f0fcb2da79f00a285a1c58d13887c899321545ea9fcc5866b0ef872fd498c5582846b6789660cd2663a50e996bcf66a16d4c510265c1aba11e40372b702f5fe2a82a4e57a9b92049889660a9233641e1cc9150e007668102fcd5f39a9b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x9c, 0x0, &(0x7f00000006c0)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x100a, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/179, 0xb3, 0x1, 0xd}, @flat=@weak_handle={0x77682a85, 0x101}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}], 0x74, 0x0, &(0x7f0000000780)="62873b44ddcd95fac13b65aea50805eea76a300bfef4b85f650e55d57aecc0fce86a85b4ef6cce0039f7f282d5e0380a8d288040de1a8a671c65994dc5b87bd9f91bfd7eed694b7f4e6b20bd4af3bef97fe882924248e6417de8484cfbc8168dd87ca4482898d7d89857ba414d6748fc9126a67b"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0xffffffffffffff88, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x40048850) syz_init_net_socket$ax25(0x3, 0x7, 0xce) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 6.266889107s ago: executing program 0 (id=227): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020be73f043c0100000000000000430000000800", @ANYRES32=0x0, @ANYBLOB="00ed0000008b06e0000020000000bdb436140b005f0fcb2da79f00a285a1c58d13887c899321545ea9fcc5866b0ef872fd498c5582846b6789660cd2663a50e996bcf66a16d4c510265c1aba11e40372b702f5fe2a82a4e57a9b92049889660a9233641e1cc9150e007668102fcd5f39a9b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x9c, 0x0, &(0x7f00000006c0)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x100a, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/179, 0xb3, 0x1, 0xd}, @flat=@weak_handle={0x77682a85, 0x101}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}], 0x70, 0x0, &(0x7f0000000780)="62873b44ddcd95fac13b65aea50805eea76a300bfef4b85f650e55d57aecc0fce86a85b4ef6cce0039f7f282d5e0380a8d288040de1a8a671c65994dc5b87bd9f91bfd7eed694b7f4e6b20bd4af3bef97fe882924248e6417de8484cfbc8168dd87ca4482898d7d89857ba414d6748fc"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0xffffffffffffff88, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x40048850) syz_init_net_socket$ax25(0x3, 0x7, 0xce) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 4.874362812s ago: executing program 1 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffbc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x204}, 0x1, 0x4, 0x2}) socket(0x18, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) 3.913133511s ago: executing program 1 (id=231): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x800}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x800}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.376187129s ago: executing program 1 (id=233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) setuid(0xee00) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x3ff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.982601254s ago: executing program 2 (id=234): r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x7, 0xffff8001, 0x0, 0x0, r1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3, 0xd}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1410, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008010) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000340)=0x6, 0x4) listen(r4, 0xe) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) sendmsg$rds(r4, &(0x7f00000008c0)={&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/174, 0xae}], 0x5, &(0x7f0000000880)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000007c0)=""/81, 0x51}, &(0x7f0000000840), 0x8}}], 0x30, 0x10}, 0x800) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000900)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r9 = signalfd4(r3, &(0x7f0000000ac0)={[0x1]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file1\x00'}) r11 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt(r11, 0x9, 0xffffffff, &(0x7f0000000b40)=""/30, &(0x7f0000000b80)=0x1e) recvmsg(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/206, 0xce}], 0x1}, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000d80)) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000dc0)) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) ioctl$KVM_CAP_HYPERV_SEND_IPI(r12, 0x4068aea3, &(0x7f0000000e00)) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000e80), &(0x7f0000000ec0)=@sha1={0x1, "18013891829fc2a8c5f552c4a5ed0e72a1b0ad15"}, 0x15, 0x2) sendto$inet6(r5, &(0x7f0000000f00)="c1e7aeeb40a967f8039b7770c92a7a1cca6dd4b2851e7471fd1dee53678840410972c51e074ddf25e2c7c23ac56f5cec22cbb348f3159573a4d37757f008062f4fbd2bdb31ebedc38b94b1ab5748740735d4bd1ec788640f998d9f7241249bf3b0279af70b694650600f325f1dd1bbb855cef0a56ef9ea87ae2eed6717da98c76823d10b995d5c5d0f3460050a1fdabc07b39bf3a14074daef76a57a4d0e778b256d89f0adf644c543f8c7cd3ada9c49be2cde58a049a5b7078e99584b44feb788c3e186f8b72b6832eacb20f10143dc71ace24df41671e08a0f819e9c911ef9b3f48de47936", 0xe6, 0x4054, 0x0, 0x0) fsetxattr(r11, &(0x7f0000001000)=@random={'btrfs.', '/selinux/enforce\x00'}, &(0x7f0000001040)='-\x00', 0x2, 0x0) 2.928567695s ago: executing program 4 (id=235): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = io_uring_setup(0x2c93, 0x0) io_uring_enter(r4, 0x0, 0xcb, 0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='+U', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf251400000005000b000100000008000300080000000500190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc814}, 0x8881) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x8140) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000040000000900000000000000", @ANYBLOB="00000000000000008c711dace484ab6e917329f9cb740000000000000400000000007d2630e312cd7472c2242710", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.92734085s ago: executing program 1 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x0) 2.79561478s ago: executing program 2 (id=237): r0 = socket(0x1d, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0x3, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x40, 0x7, 0x8, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x20, 0x1, 0x7, 0x2}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3e0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x101}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8f075b122e92"}, @NL80211_ATTR_IE={0x9d, 0x2a, [@chsw_timing={0x68, 0x4, {0x3}}, @random_vendor={0xdd, 0x42, "43e5c3b335b63595cd264b6509cd468b5e2abd83939ff74df63d948a11db174b092abc1954f8dd12ae4a837d10a25d45fe6fe26725f96ac3500e215ad9bf09ee6b50"}, @preq={0x82, 0x25, {{0x1}, 0x2, 0x88, 0x101, @device_b, 0x4, @void, 0x6, 0x8, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x4}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x16, {0x0, 0x6, @val=0x7f, @void, @val="cb298a4d939da1e65b820766c7d03f00"}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2f4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x102, 0x1, "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"}, @NL80211_BAND_60GHZ={0xea, 0x2, "3566ef94a41d653a592451b66ead5dadb08b84b2e0b10254e71d68fe72aabc09497996f66ff6f6a8286416c10aa418551bc5a7156266e94067a942c5bcb7433be90bd238b8dd468f4ee6015b5c784b94b232af6c6f29bbd8a1faeca4fb0d40427f381489a750c86865b2b5b1d8aca08bc76486f47de22b611a5b646e05b93122df76a299336d9ea7c9e5cc330bbf002494614d95cdad3149bf67eef7acadfdb4050020c1578dbf19e0c4c7776bde1864b42e9961b14fa1260de7ceac0761ab9b7df713cd7bfbb86c37428330543964c3184ed7b07c8278e25a40cbfc1b47999e7e6f091bc649"}, @NL80211_BAND_2GHZ={0xe0, 0x0, "531596c66b1f48c4dc92d2d40d41c7cc888891b94bbeef4ad0a753362682b17ab2f52823c5e526492e19850aab806453c148302458892efb8ea2f05381f045a5a09fa945dc9b086ce0b305a957593a85c5e447cd1e71a9723fedb37cde098f9d47c41e0a0b290c19a10500746dcde5af7fa023de620de725aedb79394c1d2130af3f9ef1e3b393ab701af1ee750f1a4d1f06092a74401db2102eecb271a85609f2ab93c20cef53e2a6284d13c607dc3951ba84a229a215a718e9a9ae51315c907c2c3f2dfe4d849fd1314a8881497151c228c96ccff55a6b574f17e7"}, @NL80211_BAND_2GHZ={0x1f, 0x0, "b11ae204fcee5f95e025239e89c561ca24b886a4f40d6e88fef90d"}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000007c0)=@req3={0x9, 0x437e, 0x5, 0xbf, 0x401, 0x3, 0x7}, 0x1c) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000800)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000840), 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000880)={0xfffffff8, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x88) r5 = dup2(r0, r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x98}}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000b00)={0x0, 0xad, "af83df70399744eccabc11ebd9fd13459d8d02a65d98e24e6ac704b1509b5bbc3384b2258374e689b6a7101a738d11960939057a97998e946dcc764d5ceb51b4d7df40f2a5daf8ca10c0622668df78e2d9d57bb144bcfebe604a0e0d68cb6e86963caf5371f9be4747e08910bf55841a50078c28d1ee08fa063a3521da98290ff7f8aa4a80e3674558a81104b1e729234f0904185c307a51ab644e23efbd8c1290afefedd1f8336d47a0dbeef5"}, &(0x7f0000000bc0)=0xb5) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c00)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000c40)={r7, 0x3a, "248486b5f21f81cf4e92fb79aabf3a8d692911016c381600180a0ab499728be651b7aa56fc1511ebf8f8b4ae04f9ceb7c9d6d7beb68575fbaa6e"}, &(0x7f0000000cc0)=0x42) syz_clone(0x1000000, &(0x7f0000000d00)="5f6cebb98cc180fc0ed231bc40834f103ff9f9a2822ad58427c002cfe97eac35df34aaa5e1a6145aa6c7289e28d457b0151faa87c7e101454765d0a25057a5ac718233b1ed638b30d15019fbe5ed33d5bf27a9e6980384d56f90aa64c3836049f2df241acd1afc60ae09fadc9c8f7a7653ad2d7d44276e22f4758e91d547acea44de75782aa8ef273211430bcc1320dbc09e3fd9f16bb54b266caff762c5142acfff6d5501a8252308e2501625f0570416967d53f365e71e7f6e5618b86f09c7eb56d3f0147763a5c777cf90778687a4e4bf08adcfb26c7ad95f278a0d97d0a8d8f09c7e9e50b0c8df54fc535e47b43727b9", 0xf2, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="06bd946d4d8c0bb317bba87ea4de68fdfe9c740499192d3df6cbd541a16a58c7eb2c1235e6329149e9a7d6d3d54c7abd5b64e49cb1a0fe00d1a6c99ff0e261a548a098e5eaf203beaae04e81daf95ffb104f3082567ecd05553051f36c48324f55ece23bf3f9f833d162c1cd067f7a51ef9c7341") ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000f00)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000f40)={r8}) syz_io_uring_setup(0x24ff, &(0x7f0000000f80)={0x0, 0xea4f, 0x1, 0x2, 0x265}, &(0x7f0000001000)=0x0, &(0x7f0000001040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x10c, &(0x7f0000001080)=0x8, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000010c0)=0x80000000, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x198, &(0x7f0000001100)=0x1, 0x0, 0x4) accept4(r0, 0x0, &(0x7f0000001140), 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000011c0)=@generic={&(0x7f0000001180)='./file0\x00', r5}, 0x18) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) socket$igmp6(0xa, 0x3, 0x2) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000001700)={&(0x7f0000001200), 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x44c, 0x3f3, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x2, 0x32, [0x7, 0x5, 0x2, 0x7, 0x8000000, 0xe, 0x5, 0x9, 0x7fffffff, 0x80, 0x3, 0x2, 0xffffff7b, 0xacce6b7, 0x1, 0xfffffffd, 0x1, 0x2, 0x7, 0x0, 0x4, 0x4, 0x4, 0x570c, 0x6, 0x0, 0xfffffc00, 0xa, 0x9e2, 0xfffffffe, 0x1, 0x4, 0xffff8001, 0x67a, 0x7, 0x1, 0x7, 0x0, 0x2, 0x40, 0x4, 0x5, 0x10000, 0x5, 0x2, 0x1, 0x9, 0x537, 0x2, 0x1, 0x80000000, 0x7, 0xffffffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x1, 0x2, 0x4, 0x9, 0x2, 0x6], [0x0, 0x8, 0x56e6, 0x6, 0x8001, 0xb, 0x4, 0x2, 0x4, 0x40000000, 0x5, 0x3, 0x88, 0x6, 0x268, 0x9, 0x6, 0x8, 0xcc, 0x8, 0x3, 0x41, 0x3, 0x14, 0x2, 0x10, 0x5, 0x9, 0x7f5c, 0x8000, 0x8, 0xfffffffa, 0x0, 0xb, 0x9, 0x8, 0x7fff, 0x6, 0x0, 0xf3, 0x3, 0x0, 0x5, 0x7, 0x0, 0x5, 0x6, 0x1ff, 0x4, 0x10001, 0x101, 0x6, 0x5, 0x62, 0x39, 0x1, 0x1, 0x2, 0x200, 0x2, 0x0, 0x1, 0x7, 0x1], [0x3fb, 0x5, 0x7, 0x0, 0x80000001, 0x2, 0x0, 0x8, 0x0, 0x5, 0x8, 0x9, 0xfffffff9, 0x101, 0x401, 0x4, 0x3, 0x400, 0x6, 0x1, 0x56, 0x418, 0x10001, 0xffffff7f, 0x5, 0x2, 0x2, 0x8, 0x6, 0x1, 0x1ff, 0x5, 0x0, 0x8, 0x0, 0x8000, 0xf, 0x635, 0x3, 0x7, 0x7, 0x7fff, 0x4, 0x757, 0x200, 0x3, 0x0, 0x9, 0x1, 0xd, 0x9, 0x0, 0xa, 0x9, 0x1, 0x9906, 0x7, 0x401, 0x35c, 0x2, 0x2, 0x6, 0x2, 0x9bb], [0x1, 0x6d9266f5, 0x0, 0x4a3f, 0xe638, 0x6, 0x4, 0x9, 0x1, 0xea, 0xd4, 0x4, 0x8, 0x52, 0x3, 0xab5, 0x7, 0x9, 0xfffffff7, 0x5, 0x2, 0x7, 0x3, 0x3, 0x9, 0x8100, 0x7, 0x5, 0xff, 0xe4b, 0x4, 0x9, 0x2, 0x2, 0x2, 0x7, 0x10, 0x4, 0xb030, 0x1e0, 0x8001, 0x9, 0xdace, 0x5e1d, 0x5, 0x0, 0x107, 0x9, 0x6, 0xffffffc0, 0x5, 0xb, 0xa, 0x4, 0xfffffffc, 0x10000, 0x1, 0x3, 0x6, 0x8, 0xfffffffb, 0x80000001, 0x6, 0x10001], 0x2c, ['syztnl0\x00', '\x00', '\xff\xff', '&%-{\x00', '\xff\xff', '\x00', 'syztnl0\x00', 'virt_wifi0\x00', ',^{#-\x00']}, ["", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000001740)=0x1, 0x4) 2.776157037s ago: executing program 1 (id=238): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0xe42}, 0xffc0}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0xe42}, 0xffc0}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) setsockopt(r0, 0x401, 0x2, &(0x7f0000000140)="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", 0x1000) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001140), &(0x7f00000011c0)=0x60, 0x80800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) connect$nfc_llcp(r2, &(0x7f0000001240)={0x27, r3, 0xffffffffffffffff, 0x6, 0x5, 0x6, "ac8a36b8024a372b6d3a9582aaadc9bd43bd7207ab4da3635ff32da904fbf4e7864e7eedea47677463d2b53488f0b805f4919524372cff9bb723a08d7cd0aa", 0x3d}, 0x60) (async) connect$nfc_llcp(r2, &(0x7f0000001240)={0x27, r3, 0xffffffffffffffff, 0x6, 0x5, 0x6, "ac8a36b8024a372b6d3a9582aaadc9bd43bd7207ab4da3635ff32da904fbf4e7864e7eedea47677463d2b53488f0b805f4919524372cff9bb723a08d7cd0aa", 0x3d}, 0x60) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x13) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x13) close_range(r0, r2, 0x0) r4 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f00000012c0)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001340)="468105669fabbe7918ecfb536f68b05c7f4c76c110dc86a5b13c8c33880d9e6d8d27f4f93086adaf285090211ef87670d06c326a079e1135d8ab080485abdd3b558919d86e927c81090bf823a3abf495bf6fb42e48d53020ba0f8179fcda46413aba6c983d9fa8008f5c711318e0a87ac35bff3cdd00ac3cbc9d8076d5d5e59cba84d758169fe65c45c3b3342a598a28ec51cda256e4432f7cead846af25829ae2dd1c32cd205201116e2a8f0f3428dde4ff6a31d896f109c4dcf273ad961266ea7d4421399e66cf23bbcd6aab", 0xcd}, {&(0x7f0000001440)="a434694eada93b916b477532118f942b59dbb906f5dd16f774053f1fbb59d958e9830f05b3e261aa859bbac9f3c03a74186bc0f0f24089c6cb9c2aae0876b7f19cac20941be842f191f83593047ab6d791df5a6fe68c4eb422826424c781b7b8e318e66246a7b66d55041b4a9177514434a4a76b7f00dc907c47ab052ac70c5d4fa18f5d2b5d1b47a6902a718c71976131a1796918314c020d6c90706ace9f3121e6bd65ad20c6f987bcba7bd9ffab16b8f24cfb533012db07b454b22b597ae0e2d9a327da8b90b6", 0xc8}, {&(0x7f0000001540)="d41777488be8495f3c6cadf9e43343d0c35fea3c0f5ebaebce24a7", 0x1b}, {&(0x7f0000001580)="04feede5b372cabce825c2d587ee385f723b", 0x12}, {&(0x7f00000015c0)="4f15b021a9b15bce21117ced7910271d8730164898c842da53408d5f2efb80907c7e72c14f1cd9aa119ee72c0b34b0507d1084e91fc628546fde7b3080df59939e46bead113932f522347c2f3ae96e8dae8a23354fc25bccd0c49d46de5d8023c57491cc430f1ff4d9bdac37f81a9119e5301f6d88587f3f740d24a5fe1f5b91b664353366d98553bbcc8f3af7ff573e9453df55082f09e9d73334a1e39ad93cce17ada7638a459fd7fd3f99a0187e083b2c5915e0eeec5ad0ee4a18ddd8744f6f7b82eb5d539a6566ea860fb8d95e0994cf69fcb212b9560c9ac2736cbe800b0c08fa", 0xe3}], 0x5, &(0x7f0000001740)=[{0x88, 0x109, 0x0, "caca53296dcca8c7c2841716cd8e2e3526bc2403c381c3abd5e0e91174e37f0999887abf51412b66d43022a36ab2467382e3ebeead8609d02a65a6de20032b5f5b8ef41d3d2cac230d11bc1a69d92e620fef1af75d1a5e34ba6da32d766cf988c302cf4bd898c446f04a9ae569f35553be8c83fc6c97"}, {0xf8, 0xe7, 0x8, "eaf9a8df6ff1df9606cecff52359190f1a8668b9e8ff750f303000ffe924174bda682c6a35e71490145ff608164a169454f97fa3be679936c11f4540772696a2c825f265626f4fc594a4202a56dd5376f6e3313215e3a06a67e471f959dd6fd59eb22aede4f830186c3daa730690d95e9fda218325289c3dd74d5d882f014934c62f837d00f01578a4e72872b77734d55cca602992156aeec362e33cb0554ae1f8a6b0ef05391bb33d2ebde120589ca76a3d14fb2805c85d13891a475d18c47592bf270bfea1cddba3eb4a35b2ef7e4c52bda6f60ca111c581a9aa6db42a1af9aa"}, {0xe8, 0x0, 0x91bce54, "c0d7ea9b3a0ef9806992c1e09f67ace4ffd4d37ace210605f17af6b8d3f59b90abbf652a29bec9847ddcc47ce12e554e3b4496b6a3a3568c249953664fc244f0e81077af0ac7b50ad905a52b3a17363ff052003078be50817f66e08ccd98f7650ab0eccbf185be010529c9d78603dc310f42851d29316c2234be46397a2962c64608d2540d87bd34fe301ae50efd4c2fb05bde74c19ba430d86a31633d761c5b1a2311476155743f85f426d286c651dd9bbfe3da1803f01efebe2d5e964f69ac577cbb191cae854428bb37cb348932f5695b5ef2d2c9c7"}], 0x268}, 0x20000814) (async) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f00000012c0)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001340)="468105669fabbe7918ecfb536f68b05c7f4c76c110dc86a5b13c8c33880d9e6d8d27f4f93086adaf285090211ef87670d06c326a079e1135d8ab080485abdd3b558919d86e927c81090bf823a3abf495bf6fb42e48d53020ba0f8179fcda46413aba6c983d9fa8008f5c711318e0a87ac35bff3cdd00ac3cbc9d8076d5d5e59cba84d758169fe65c45c3b3342a598a28ec51cda256e4432f7cead846af25829ae2dd1c32cd205201116e2a8f0f3428dde4ff6a31d896f109c4dcf273ad961266ea7d4421399e66cf23bbcd6aab", 0xcd}, {&(0x7f0000001440)="a434694eada93b916b477532118f942b59dbb906f5dd16f774053f1fbb59d958e9830f05b3e261aa859bbac9f3c03a74186bc0f0f24089c6cb9c2aae0876b7f19cac20941be842f191f83593047ab6d791df5a6fe68c4eb422826424c781b7b8e318e66246a7b66d55041b4a9177514434a4a76b7f00dc907c47ab052ac70c5d4fa18f5d2b5d1b47a6902a718c71976131a1796918314c020d6c90706ace9f3121e6bd65ad20c6f987bcba7bd9ffab16b8f24cfb533012db07b454b22b597ae0e2d9a327da8b90b6", 0xc8}, {&(0x7f0000001540)="d41777488be8495f3c6cadf9e43343d0c35fea3c0f5ebaebce24a7", 0x1b}, {&(0x7f0000001580)="04feede5b372cabce825c2d587ee385f723b", 0x12}, {&(0x7f00000015c0)="4f15b021a9b15bce21117ced7910271d8730164898c842da53408d5f2efb80907c7e72c14f1cd9aa119ee72c0b34b0507d1084e91fc628546fde7b3080df59939e46bead113932f522347c2f3ae96e8dae8a23354fc25bccd0c49d46de5d8023c57491cc430f1ff4d9bdac37f81a9119e5301f6d88587f3f740d24a5fe1f5b91b664353366d98553bbcc8f3af7ff573e9453df55082f09e9d73334a1e39ad93cce17ada7638a459fd7fd3f99a0187e083b2c5915e0eeec5ad0ee4a18ddd8744f6f7b82eb5d539a6566ea860fb8d95e0994cf69fcb212b9560c9ac2736cbe800b0c08fa", 0xe3}], 0x5, &(0x7f0000001740)=[{0x88, 0x109, 0x0, "caca53296dcca8c7c2841716cd8e2e3526bc2403c381c3abd5e0e91174e37f0999887abf51412b66d43022a36ab2467382e3ebeead8609d02a65a6de20032b5f5b8ef41d3d2cac230d11bc1a69d92e620fef1af75d1a5e34ba6da32d766cf988c302cf4bd898c446f04a9ae569f35553be8c83fc6c97"}, {0xf8, 0xe7, 0x8, "eaf9a8df6ff1df9606cecff52359190f1a8668b9e8ff750f303000ffe924174bda682c6a35e71490145ff608164a169454f97fa3be679936c11f4540772696a2c825f265626f4fc594a4202a56dd5376f6e3313215e3a06a67e471f959dd6fd59eb22aede4f830186c3daa730690d95e9fda218325289c3dd74d5d882f014934c62f837d00f01578a4e72872b77734d55cca602992156aeec362e33cb0554ae1f8a6b0ef05391bb33d2ebde120589ca76a3d14fb2805c85d13891a475d18c47592bf270bfea1cddba3eb4a35b2ef7e4c52bda6f60ca111c581a9aa6db42a1af9aa"}, {0xe8, 0x0, 0x91bce54, "c0d7ea9b3a0ef9806992c1e09f67ace4ffd4d37ace210605f17af6b8d3f59b90abbf652a29bec9847ddcc47ce12e554e3b4496b6a3a3568c249953664fc244f0e81077af0ac7b50ad905a52b3a17363ff052003078be50817f66e08ccd98f7650ab0eccbf185be010529c9d78603dc310f42851d29316c2234be46397a2962c64608d2540d87bd34fe301ae50efd4c2fb05bde74c19ba430d86a31633d761c5b1a2311476155743f85f426d286c651dd9bbfe3da1803f01efebe2d5e964f69ac577cbb191cae854428bb37cb348932f5695b5ef2d2c9c7"}], 0x268}, 0x20000814) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000001a00)={0x5, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/power/pm_test', 0x0, 0x10) io_uring_enter(r5, 0x22fd, 0xca97, 0x10, &(0x7f0000001a80)={[0x2]}, 0x8) (async) io_uring_enter(r5, 0x22fd, 0xca97, 0x10, &(0x7f0000001a80)={[0x2]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r5, {0x7f, 0xfffffffd}}, './file0\x00'}) r7 = dup(r0) syz_open_dev$swradio(&(0x7f0000001b00), 0x1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000001b80)='FREEZING\x00', 0x9) (async) write$cgroup_freezer_state(r5, &(0x7f0000001b80)='FREEZING\x00', 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001bc0)={0x0, @in6={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}, 0x7fff, 0x6}, &(0x7f0000001c80)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000001cc0)={r8, 0x6}, &(0x7f0000001d00)=0x8) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001d40)={0x63, "9094447ce118fa660483433166846fbaffab9cbfd2432f3745d3e3383c5ee76d4ace0c575130a5716f49f4b358e27a76e764ec106e778e2979b178218770e0e2a9b61ea5fe7947e18c1035e236adec821a6c4f4aede3d8b665831e9ec098c3489e08ac"}) (async) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001d40)={0x63, "9094447ce118fa660483433166846fbaffab9cbfd2432f3745d3e3383c5ee76d4ace0c575130a5716f49f4b358e27a76e764ec106e778e2979b178218770e0e2a9b61ea5fe7947e18c1035e236adec821a6c4f4aede3d8b665831e9ec098c3489e08ac"}) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001dc0), 0x480801) copy_file_range(r2, &(0x7f0000001e00)=0x3, r10, &(0x7f0000001e40)=0x1e, 0x8000, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) pwritev(r11, &(0x7f0000002240)=[{&(0x7f0000001e80)="e231cb50dbed502f5830e24c4ee25db5cc15a5cb0d08678f28be185f3f043fff7553ee8a613a3298043284db524083aab540d2847d0ad2c9176f100c06fb68d1ab649d019b550494280b589c1a485c1ed819cc1bab4f1b3b05471d5fb430bc49dececc4b73a9", 0x66}, {&(0x7f0000001f00)="eb72b93e7dbd2a3e6eb4a66edda0cad422bde4", 0x13}, {&(0x7f0000001f40)="6fbd39fab6bf02b0c40909b2e7705420c4702e765349a74b26ce6320062c1dfdd35134e9435511a2d54c05141177c840f2d760ee8950a678d2ef56c293880faf07b3754dc60efa0d348a96304a167860f5facad259d63a81e18d6017c70aad0285d560159e9df538fc047fb6890070c71e27e74c6aaeb2fd85e82723e3efcc996d6477c0cfdab7575189601288fcdabe3ae4e8d2929b08f43f42da65c39cd7efa898456e86b5593743de4cdba2873bb90a596fa7df89d440", 0xb8}, {&(0x7f0000002000)="4872627f723e9d035ae18387dfab191cc8db47e960bdd87f5e5cfd7b71f0dfbeb798a342efd8703ed8133e4990cadcb57c5ae9a9cb0a923cf5ef48ccbeff78bec6f4ec", 0x43}, {&(0x7f0000002080)="1c351e2682d2ea5fee1438338ef1cdf343e74e4cdf221b789787fac8d66cf87b4a525e9d0cbd668b71d80ac80441fc9b85b79a94151a7433699082f629712e44751a92540dbf60777e8c1694d6b847f5db97ae8924f567570397ee827abce9d03eef7d2a3b50b169467a70863e99d67b374d829c0e7ed8e2b22224b5034752532e5cca82189b3518f1387111c6c783fef1831681689d00", 0x97}, {&(0x7f0000002140)="e683686c43b9f10b99e00e104ff4d8988f0400ae63eb17e65a1ebc657c25f7170b323aa8b7d86774499c38352c44e0c2fb2c81efb096", 0x36}, {&(0x7f0000002180)="47e51e225f44ce4b4b65", 0xa}, {&(0x7f00000021c0)="efa4d0394a4daaca20c10a057b01f8bcee1609e61ba5d9b989f514bb5f29a9415d81c756297b64c232fd9919356f1168d8eeba9c31559b02ceff213f2ff7c37957e0e9", 0x43}], 0x8, 0xfffffff7, 0x4) (async) pwritev(r11, &(0x7f0000002240)=[{&(0x7f0000001e80)="e231cb50dbed502f5830e24c4ee25db5cc15a5cb0d08678f28be185f3f043fff7553ee8a613a3298043284db524083aab540d2847d0ad2c9176f100c06fb68d1ab649d019b550494280b589c1a485c1ed819cc1bab4f1b3b05471d5fb430bc49dececc4b73a9", 0x66}, {&(0x7f0000001f00)="eb72b93e7dbd2a3e6eb4a66edda0cad422bde4", 0x13}, {&(0x7f0000001f40)="6fbd39fab6bf02b0c40909b2e7705420c4702e765349a74b26ce6320062c1dfdd35134e9435511a2d54c05141177c840f2d760ee8950a678d2ef56c293880faf07b3754dc60efa0d348a96304a167860f5facad259d63a81e18d6017c70aad0285d560159e9df538fc047fb6890070c71e27e74c6aaeb2fd85e82723e3efcc996d6477c0cfdab7575189601288fcdabe3ae4e8d2929b08f43f42da65c39cd7efa898456e86b5593743de4cdba2873bb90a596fa7df89d440", 0xb8}, {&(0x7f0000002000)="4872627f723e9d035ae18387dfab191cc8db47e960bdd87f5e5cfd7b71f0dfbeb798a342efd8703ed8133e4990cadcb57c5ae9a9cb0a923cf5ef48ccbeff78bec6f4ec", 0x43}, {&(0x7f0000002080)="1c351e2682d2ea5fee1438338ef1cdf343e74e4cdf221b789787fac8d66cf87b4a525e9d0cbd668b71d80ac80441fc9b85b79a94151a7433699082f629712e44751a92540dbf60777e8c1694d6b847f5db97ae8924f567570397ee827abce9d03eef7d2a3b50b169467a70863e99d67b374d829c0e7ed8e2b22224b5034752532e5cca82189b3518f1387111c6c783fef1831681689d00", 0x97}, {&(0x7f0000002140)="e683686c43b9f10b99e00e104ff4d8988f0400ae63eb17e65a1ebc657c25f7170b323aa8b7d86774499c38352c44e0c2fb2c81efb096", 0x36}, {&(0x7f0000002180)="47e51e225f44ce4b4b65", 0xa}, {&(0x7f00000021c0)="efa4d0394a4daaca20c10a057b01f8bcee1609e61ba5d9b989f514bb5f29a9415d81c756297b64c232fd9919356f1168d8eeba9c31559b02ceff213f2ff7c37957e0e9", 0x43}], 0x8, 0xfffffff7, 0x4) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000022c0), 0x10, 0x80800) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000002340)={0x1, 0x0, 0x101, 0x6, {0x7, 0x7, 0x77, 0x9}}) 2.005619349s ago: executing program 2 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.892153287s ago: executing program 4 (id=240): inotify_init1(0x800) pipe2$9p(&(0x7f0000000000), 0x80000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x240040c0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = accept4$rose(r6, 0x0, &(0x7f0000000080), 0x0) close_range(r7, r6, 0x2) sendfile(r5, r6, 0x0, 0x20000023896) 1.824077224s ago: executing program 2 (id=241): r0 = socket(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0x6, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) listen(r3, 0x0) listen(r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x1e, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8) close(r4) r6 = userfaultfd(0x80001) open_by_handle_at(r6, &(0x7f0000000200)=@ceph_nfs_confh={0x10, 0x2, {0x5, 0x2}}, 0x480400) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="42d6028db158f88ca9bfd839313b91050da7b42120c778f1687c1608afe6e74f71e42371ff22f7aa595018d2743e50c3fa7ecbfa4a", 0x35}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f00000000c0)="2d9efb0252d2476121b156968a1b372453e0c6a1be650197a6129e80f398be93e71899e35bb51cf96e77c16cbe74276a86a39e3a781741", 0x37}], 0x3) socket$nl_route(0x10, 0x3, 0x0) 1.164599614s ago: executing program 2 (id=242): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x64b0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x68000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f0000000300)) r3 = socket(0x15, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x140, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x110, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x28, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc, 0x4, 0x3ff}, {0xc, 0x4, 0x2}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x88, 0x3, 0x0, 0x1, [{0xc}, {0xc, 0x3, 0x7ff}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x8}, {0xc}, {0xc, 0x3, 0x101}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4194}, {0xc, 0x3, 0x7}]}]}}}]}, 0x140}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xfee1, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x9c, 0x24, 0x0, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x1, 0xffff}, {0x1, 0x3}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x82}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_STAB={0x50}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x1}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c081}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004380)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 1.13674728s ago: executing program 1 (id=243): r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="4191062c1421f8", 0x7}], 0x1, 0xc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000002600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0xffff, 0x85df, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000290000000b000000000031a800000000200000000000000029000000370000000000000000000000050200040000000030000000000000002900000036000000000200000000000001000e11a928d5c8e9b0adf2f11956e318088ae3ab0000001400000000000000290000000b0000000000007f00000000400000000000000029000000040000008705000000200000c2040000000107200000000106030300020000000000000000000000000000000d000000000000003000000000000000290000000400"], 0xf0}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r7 = accept(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) sendmmsg$alg(r7, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a40)="5beac11d8fb5f6ac4eb56fa09c9f24d0843a8bf75de4fca6d6e9f565e8ffc1fa10ed1d3190a50e73145469dc1b539487", 0x30}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x1) recvmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x40, 0x2, 0x5, {0xfffffe4a, 0x32, '&W\v'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 902.273684ms ago: executing program 4 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000002020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800044000000004080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 823.81296ms ago: executing program 0 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x476a, 0x8001}) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x1b50, &(0x7f0000000080)={0x0, 0xf3e0, 0x8000, 0xfffffffe, 0x1000008, 0x0, r5}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ff"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r10, 0x0) 688.660304ms ago: executing program 4 (id=246): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {0x0, 0x0, 0x88020000}, 0x0, 0x1, 0x0, 0x170, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) 652.641449ms ago: executing program 4 (id=247): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000240)=""/178, 0xb2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) 468.419711ms ago: executing program 4 (id=248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000080)={0x9, 0x1000086}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x20040811) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x50, 0xffffffffffffffff, 0x10000000) r3 = syz_io_uring_setup(0x54cf, 0x0, &(0x7f0000000480)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2007, @fd_index=0x3, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x45, 0x3, &(0x7f0000000600)="d069bd86a604c13e907dac4368a85970d921c8cb4912444e134adfe5ff95af2d6297e71631c656a2603c8d3e7b7461af9dfc063066dcfb8b37838a13576d93058223ecf41ead91c6612d27d2e62ebc4c4f24575161e062c5e59709c065fa103f56dae333ac826bdc3446625567cba99632fec775bf6bc45c9ab11f4353f8bd774f9131158a9df2850447e986fe135ab858b0759c1b485ebefa4f208542aa4a3f553484a7ae0adb150fbde73f920923dbf016a33cd76dbee460d174d892bae63cdf", 0x2, 0x0, 0x1, {0x0, r6}}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) bind$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dba", 0xaa}], 0x2, &(0x7f0000000100)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x40000) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="010026bd70003c02d26dd73a0000080001"], 0xfd45}}, 0x4800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 0s ago: executing program 2 (id=249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0xe3ce3000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r5, 0x84, 0x23, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x3e, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c000}, 0xa000) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_rr_get_interval(r9, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 8][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.710794][ T5856] bridge_slave_0: entered allmulticast mode [ 67.717461][ T5856] bridge_slave_0: entered promiscuous mode [ 67.741529][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.759275][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.766455][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.774342][ T5856] bridge_slave_1: entered allmulticast mode [ 67.781610][ T5856] bridge_slave_1: entered promiscuous mode [ 67.800757][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.835275][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.842644][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.849732][ T5844] bridge_slave_0: entered allmulticast mode [ 67.858461][ T5844] bridge_slave_0: entered promiscuous mode [ 67.889281][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.900451][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.907809][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.916295][ T5844] bridge_slave_1: entered allmulticast mode [ 67.923788][ T5844] bridge_slave_1: entered promiscuous mode [ 67.942609][ T5843] team0: Port device team_slave_0 added [ 67.955617][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.982337][ T5843] team0: Port device team_slave_1 added [ 68.023203][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.035521][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.058480][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.065865][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.073272][ T5848] bridge_slave_0: entered allmulticast mode [ 68.079916][ T5848] bridge_slave_0: entered promiscuous mode [ 68.096808][ T5856] team0: Port device team_slave_0 added [ 68.110998][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.117947][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.143858][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.156173][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.163372][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.189373][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.200813][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.208568][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.215881][ T5848] bridge_slave_1: entered allmulticast mode [ 68.222624][ T5848] bridge_slave_1: entered promiscuous mode [ 68.228977][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.236338][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.243533][ T5849] bridge_slave_0: entered allmulticast mode [ 68.250135][ T5849] bridge_slave_0: entered promiscuous mode [ 68.258229][ T5856] team0: Port device team_slave_1 added [ 68.273561][ T5844] team0: Port device team_slave_0 added [ 68.302677][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.309851][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.317220][ T5849] bridge_slave_1: entered allmulticast mode [ 68.324381][ T5849] bridge_slave_1: entered promiscuous mode [ 68.346561][ T5844] team0: Port device team_slave_1 added [ 68.356489][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.401361][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.412673][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.429365][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.436654][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.462647][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.492372][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.499325][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.525675][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.538264][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.556890][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.563970][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.589998][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.609159][ T5843] hsr_slave_0: entered promiscuous mode [ 68.615410][ T5843] hsr_slave_1: entered promiscuous mode [ 68.622074][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.629004][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.655235][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.679362][ T5848] team0: Port device team_slave_0 added [ 68.687472][ T5848] team0: Port device team_slave_1 added [ 68.724249][ T5849] team0: Port device team_slave_0 added [ 68.762092][ T5849] team0: Port device team_slave_1 added [ 68.777641][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.784755][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.810646][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.822799][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.829750][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.855680][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.874382][ T5856] hsr_slave_0: entered promiscuous mode [ 68.880384][ T5856] hsr_slave_1: entered promiscuous mode [ 68.886661][ T5850] Bluetooth: hci0: command tx timeout [ 68.887087][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 68.897949][ T5856] Cannot create hsr debugfs directory [ 68.934477][ T5844] hsr_slave_0: entered promiscuous mode [ 68.940796][ T5844] hsr_slave_1: entered promiscuous mode [ 68.946690][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 68.952926][ T5844] Cannot create hsr debugfs directory [ 68.961090][ T5863] Bluetooth: hci3: command tx timeout [ 68.966773][ T5863] Bluetooth: hci1: command tx timeout [ 68.972661][ T5858] Bluetooth: hci2: command tx timeout [ 68.977184][ T5850] Bluetooth: hci4: command tx timeout [ 68.990208][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.997197][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.023844][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.035971][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.043001][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.068944][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.162327][ T5848] hsr_slave_0: entered promiscuous mode [ 69.168500][ T5848] hsr_slave_1: entered promiscuous mode [ 69.174992][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 69.180797][ T5848] Cannot create hsr debugfs directory [ 69.189760][ T5849] hsr_slave_0: entered promiscuous mode [ 69.197087][ T5849] hsr_slave_1: entered promiscuous mode [ 69.203274][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 69.209011][ T5849] Cannot create hsr debugfs directory [ 69.503601][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.531440][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.548787][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.568992][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.618936][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.632459][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.645524][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.658521][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.734418][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.752289][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.783192][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.793619][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.859851][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.868158][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.894130][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.904875][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.915728][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.958821][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.997889][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.005181][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.019754][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.027356][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.038372][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.065345][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.085993][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.112996][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.120091][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.158759][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.177098][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.208073][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.215170][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.239911][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.247006][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.280237][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.309333][ T30] audit: type=1400 audit(1757443409.332:86): avc: denied { sys_module } for pid=5856 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.354875][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.362053][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.376909][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.383993][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.474081][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.538381][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.555393][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.562543][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.589333][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.596453][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.616429][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.688597][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.715445][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.759660][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.766820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.782626][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.790184][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.809686][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.833212][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.913731][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.970760][ T5850] Bluetooth: hci0: command tx timeout [ 70.985856][ T5856] veth0_vlan: entered promiscuous mode [ 71.042574][ T5850] Bluetooth: hci1: command tx timeout [ 71.042915][ T5863] Bluetooth: hci2: command tx timeout [ 71.047987][ T5850] Bluetooth: hci3: command tx timeout [ 71.055638][ T5863] Bluetooth: hci4: command tx timeout [ 71.081077][ T5856] veth1_vlan: entered promiscuous mode [ 71.125615][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.132874][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.159668][ T5843] veth0_vlan: entered promiscuous mode [ 71.215737][ T5843] veth1_vlan: entered promiscuous mode [ 71.226323][ T5856] veth0_macvtap: entered promiscuous mode [ 71.271737][ T5856] veth1_macvtap: entered promiscuous mode [ 71.285960][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.319177][ T5843] veth0_macvtap: entered promiscuous mode [ 71.336672][ T5843] veth1_macvtap: entered promiscuous mode [ 71.350365][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.367822][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.378375][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.388617][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.407428][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.422246][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.445531][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.454938][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.464600][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.473967][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.491133][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516279][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526082][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.576344][ T5848] veth0_vlan: entered promiscuous mode [ 71.601011][ T5844] veth0_vlan: entered promiscuous mode [ 71.629013][ T5849] veth0_vlan: entered promiscuous mode [ 71.658634][ T5848] veth1_vlan: entered promiscuous mode [ 71.678697][ T5844] veth1_vlan: entered promiscuous mode [ 71.702424][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.710350][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.719210][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.734666][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.753177][ T5849] veth1_vlan: entered promiscuous mode [ 71.816759][ T5848] veth0_macvtap: entered promiscuous mode [ 71.825895][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.834786][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.835565][ T5848] veth1_macvtap: entered promiscuous mode [ 71.850642][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.855103][ T5844] veth0_macvtap: entered promiscuous mode [ 71.861487][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.882540][ T30] audit: type=1400 audit(1757443410.912:87): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.B6c1fE/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.907913][ T30] audit: type=1400 audit(1757443410.912:88): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.921794][ T5849] veth0_macvtap: entered promiscuous mode [ 71.931357][ T30] audit: type=1400 audit(1757443410.912:89): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.B6c1fE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.959614][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.973520][ T5844] veth1_macvtap: entered promiscuous mode [ 71.978239][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.979589][ T30] audit: type=1400 audit(1757443410.912:90): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.018078][ T5849] veth1_macvtap: entered promiscuous mode [ 72.020905][ T30] audit: type=1400 audit(1757443410.912:91): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.B6c1fE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.053396][ T30] audit: type=1400 audit(1757443410.912:92): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.B6c1fE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.058666][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.092514][ T30] audit: type=1400 audit(1757443410.922:93): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.113457][ T30] audit: type=1400 audit(1757443410.942:94): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.148510][ T30] audit: type=1400 audit(1757443410.972:95): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="gadgetfs" ino=7512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.168037][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.191406][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223575][ T30] audit: type=1400 audit(1757443410.972:96): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.229789][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.263395][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.271217][ T1108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.299290][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.344538][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354108][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383015][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.402279][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.452623][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.475130][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.500831][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527869][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.544153][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.594191][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.685635][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.706285][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.776489][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.789245][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.860208][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.884468][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.935171][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.944776][ T5971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 72.964637][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.006163][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.019218][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.039366][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.047418][ T5863] Bluetooth: hci0: command tx timeout [ 73.060466][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.120934][ T5863] Bluetooth: hci4: command tx timeout [ 73.128690][ T5861] Bluetooth: hci3: command tx timeout [ 73.129135][ T5850] Bluetooth: hci2: command tx timeout [ 73.135546][ T5861] Bluetooth: hci1: command tx timeout [ 73.401439][ T5976] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 73.922390][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.001416][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.119903][ T5919] IPVS: starting estimator thread 0... [ 74.201049][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 74.217552][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.242662][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.253577][ T5885] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 74.260918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 74.271951][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.301748][ T5994] IPVS: using max 46 ests per chain, 110400 per kthread [ 74.314522][ T5988] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 74.363390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.417072][ T5885] usb 1-1: config 0 descriptor?? [ 74.556335][ T5988] batman_adv: batadv0: Adding interface: team0 [ 74.610187][ T5999] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 74.670453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.700794][ T5988] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.731856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 74.816479][ T5999] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.832723][ T5988] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.843636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.852358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.941338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 74.949669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 74.952233][ T5999] team0: entered promiscuous mode [ 74.972845][ T5999] team_slave_0: entered promiscuous mode [ 74.977808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.041358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.163096][ T5885] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 1/5 [ 75.171932][ T5861] Bluetooth: hci0: command tx timeout [ 75.172117][ T5885] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 75.186770][ T5885] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 75.200881][ T5861] Bluetooth: hci2: command tx timeout [ 75.202902][ T5863] Bluetooth: hci3: command tx timeout [ 75.213651][ T5861] Bluetooth: hci1: command tx timeout [ 75.219861][ T5863] Bluetooth: hci4: command tx timeout [ 75.371430][ T5999] team_slave_1: entered promiscuous mode [ 75.686226][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.713357][ T5999] batman_adv: batadv0: Interface activated: team0 [ 75.738530][ T5999] batman_adv: batadv0: Interface deactivated: team0 [ 75.781999][ T5999] batman_adv: batadv0: Removing interface: team0 [ 75.861597][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.893036][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.908562][ T5885] usb 1-1: USB disconnect, device number 2 [ 75.945709][ T5999] bridge0: port 3(team0) entered blocking state [ 75.952983][ T5999] bridge0: port 3(team0) entered disabled state [ 75.964187][ T5999] team0: entered allmulticast mode [ 75.969352][ T5999] team_slave_0: entered allmulticast mode [ 75.978073][ T5999] team_slave_1: entered allmulticast mode [ 76.491853][ T5999] bridge0: port 3(team0) entered blocking state [ 76.498385][ T5999] bridge0: port 3(team0) entered forwarding state [ 76.576403][ T6013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.022558][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 77.022577][ T30] audit: type=1400 audit(1757443416.032:156): avc: denied { create } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.095939][ T6013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.139541][ T30] audit: type=1400 audit(1757443416.082:157): avc: denied { write } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.203536][ T30] audit: type=1400 audit(1757443416.082:158): avc: denied { create } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.223707][ T30] audit: type=1400 audit(1757443416.082:159): avc: denied { bind } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.244770][ T30] audit: type=1400 audit(1757443416.222:160): avc: denied { connect } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.271997][ T6026] input: syz1 as /devices/virtual/input/input5 [ 77.288763][ T30] audit: type=1400 audit(1757443416.222:161): avc: denied { create } for pid=6020 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.430359][ T30] audit: type=1400 audit(1757443416.312:162): avc: denied { setopt } for pid=6023 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.456588][ T30] audit: type=1400 audit(1757443416.312:163): avc: denied { write } for pid=6023 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.941148][ T30] audit: type=1400 audit(1757443416.312:164): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.966297][ T30] audit: type=1400 audit(1757443416.312:165): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.129974][ T6041] Invalid ELF header magic: != ELF [ 78.169367][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15'. [ 78.225903][ T6013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.269821][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15'. [ 78.703474][ T6013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.908758][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056670][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.526029][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.546354][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.950730][ T6061] sd 0:0:1:0: PR command failed: 1026 [ 79.975217][ T6061] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 80.058953][ T6061] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 81.826698][ T9] cfg80211: failed to load regulatory.db [ 82.122610][ T6094] Zero length message leads to an empty skb [ 82.150605][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.314827][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.351086][ T54] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 82.482257][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 82.482272][ T30] audit: type=1400 audit(1757443421.512:256): avc: denied { bind } for pid=6096 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.507710][ T6097] trusted_key: syz.4.26 sent an empty control message without MSG_MORE. [ 82.524247][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.545605][ T54] usb 3-1: config 0 descriptor?? [ 82.569906][ T30] audit: type=1400 audit(1757443421.512:257): avc: denied { setopt } for pid=6096 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.597387][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 82.618488][ T30] audit: type=1400 audit(1757443421.512:258): avc: denied { accept } for pid=6096 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.745815][ T30] audit: type=1400 audit(1757443421.542:259): avc: denied { write } for pid=6096 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.768495][ T30] audit: type=1400 audit(1757443421.562:260): avc: denied { ioctl } for pid=6096 comm="syz.4.26" path="socket:[8015]" dev="sockfs" ino=8015 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.192211][ T30] audit: type=1400 audit(1757443421.562:261): avc: denied { read write } for pid=6096 comm="syz.4.26" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.255841][ T6107] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 83.294970][ T6107] batman_adv: batadv0: Adding interface: team0 [ 83.304374][ T6107] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.377112][ T6107] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.427651][ T30] audit: type=1400 audit(1757443421.562:262): avc: denied { open } for pid=6096 comm="syz.4.26" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.474818][ T30] audit: type=1400 audit(1757443421.712:263): avc: denied { read } for pid=6096 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.505426][ T30] audit: type=1400 audit(1757443421.882:264): avc: denied { create } for pid=6101 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.533729][ T30] audit: type=1400 audit(1757443421.912:265): avc: denied { ioctl } for pid=6101 comm="syz.0.28" path="socket:[8023]" dev="sockfs" ino=8023 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.558462][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.730604][ T923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.934798][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.177360][ T54] pwc: recv_control_msg error -71 req 02 val 2700 [ 84.194988][ T54] pwc: recv_control_msg error -71 req 02 val 2c00 [ 84.205138][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.217464][ T54] pwc: recv_control_msg error -71 req 04 val 1000 [ 84.239304][ T54] pwc: recv_control_msg error -71 req 04 val 1300 [ 84.392288][ T923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.431563][ T54] pwc: recv_control_msg error -71 req 04 val 1400 [ 84.455045][ T54] pwc: recv_control_msg error -71 req 02 val 2000 [ 84.471039][ T923] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 84.616984][ T54] pwc: recv_control_msg error -71 req 02 val 2100 [ 84.626096][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.640907][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.714431][ T54] pwc: recv_control_msg error -71 req 04 val 1500 [ 84.835621][ T6125] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 84.852972][ T54] pwc: recv_control_msg error -71 req 02 val 2500 [ 84.860270][ T6125] netlink: 2 bytes leftover after parsing attributes in process `syz.3.27'. [ 84.871837][ T54] pwc: recv_control_msg error -71 req 02 val 2400 [ 84.878440][ T923] usb 5-1: config 0 descriptor?? [ 84.886930][ T54] pwc: recv_control_msg error -71 req 02 val 2600 [ 85.260077][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 85.267783][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.287981][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 85.300808][ T6125] team0: entered promiscuous mode [ 85.313097][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.328615][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 85.332795][ T54] pwc: recv_control_msg error -71 req 02 val 2900 [ 85.345370][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 85.357984][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.369663][ T6125] team_slave_0: entered promiscuous mode [ 85.400024][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.400775][ T6125] team_slave_1: entered promiscuous mode [ 85.416629][ T54] pwc: recv_control_msg error -71 req 02 val 2800 [ 85.426437][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.433699][ T54] pwc: recv_control_msg error -71 req 04 val 1100 [ 85.440334][ T6125] batman_adv: batadv0: Interface activated: team0 [ 85.447579][ T6125] batman_adv: batadv0: Interface deactivated: team0 [ 85.454672][ T54] pwc: recv_control_msg error -71 req 04 val 1200 [ 85.470837][ T54] pwc: Registered as video103. [ 85.481198][ T6125] batman_adv: batadv0: Removing interface: team0 [ 85.488769][ T54] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 85.536609][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.557493][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.572706][ T5919] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 85.583862][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.631139][ T6125] bridge0: port 3(team0) entered blocking state [ 85.637429][ T6125] bridge0: port 3(team0) entered disabled state [ 85.653305][ T54] usb 3-1: USB disconnect, device number 2 [ 85.663012][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.682221][ T6125] team0: entered allmulticast mode [ 85.698282][ T5919] usb 2-1: Product: syz [ 85.718163][ T6125] team_slave_0: entered allmulticast mode [ 85.719698][ T5919] usb 2-1: Manufacturer: syz [ 85.868582][ T5919] usb 2-1: SerialNumber: syz [ 85.898777][ T6125] team_slave_1: entered allmulticast mode [ 85.904975][ T5919] usb 2-1: config 0 descriptor?? [ 85.912927][ T6116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.936420][ T6125] bridge0: port 3(team0) entered blocking state [ 85.942811][ T6125] bridge0: port 3(team0) entered forwarding state [ 86.457513][ T923] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 86.523009][ T923] usb 5-1: USB disconnect, device number 2 [ 86.944088][ T6139] fido_id[6139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 87.780339][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.38'. [ 87.852670][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.38'. [ 87.954173][ T5919] rc_core: IR keymap rc-snapstream-firefly not found [ 87.965900][ T5919] Registered IR keymap rc-empty [ 87.989509][ T5919] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 88.012906][ T5919] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 88.263909][ T5919] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 88.302270][ T5919] usb 2-1: USB disconnect, device number 2 [ 88.308162][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 88.393771][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 88.393788][ T30] audit: type=1400 audit(1757443427.382:272): avc: denied { write } for pid=6157 comm="syz.1.41" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.555231][ T6174] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 88.946819][ T6174] batman_adv: batadv0: Adding interface: team0 [ 89.016523][ T6174] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.261282][ T6179] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 89.276704][ T6179] netlink: 2 bytes leftover after parsing attributes in process `syz.0.42'. [ 89.343417][ T6174] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 90.106766][ T6179] team0: entered promiscuous mode [ 90.238758][ T6179] team_slave_0: entered promiscuous mode [ 90.354833][ T6179] team_slave_1: entered promiscuous mode [ 90.393006][ T30] audit: type=1400 audit(1757443429.392:273): avc: denied { create } for pid=6190 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.395376][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.479536][ T977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.840573][ T6179] batman_adv: batadv0: Interface activated: team0 [ 90.843388][ T6179] batman_adv: batadv0: Interface deactivated: team0 [ 90.843544][ T6179] batman_adv: batadv0: Removing interface: team0 [ 90.922297][ T6179] bridge0: port 3(team0) entered blocking state [ 90.931226][ T6179] bridge0: port 3(team0) entered disabled state [ 90.974475][ T6179] team0: entered allmulticast mode [ 90.974637][ T6179] team_slave_0: entered allmulticast mode [ 90.974687][ T6179] team_slave_1: entered allmulticast mode [ 91.027838][ T6201] FAULT_INJECTION: forcing a failure. [ 91.027838][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.027870][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(full) [ 91.027883][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.027889][ T6201] Call Trace: [ 91.027894][ T6201] [ 91.027900][ T6201] dump_stack_lvl+0x16c/0x1f0 [ 91.027919][ T6201] should_fail_ex+0x512/0x640 [ 91.027939][ T6201] _copy_from_user+0x2e/0xd0 [ 91.027955][ T6201] copy_msghdr_from_user+0x98/0x160 [ 91.027970][ T6201] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.027989][ T6201] ___sys_sendmsg+0xfe/0x1d0 [ 91.028002][ T6201] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.028032][ T6201] __sys_sendmsg+0x16d/0x220 [ 91.028044][ T6201] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.028066][ T6201] do_syscall_64+0xcd/0x4c0 [ 91.028081][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.028092][ T6201] RIP: 0033:0x7ffabeb8ebe9 [ 91.028100][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.028110][ T6201] RSP: 002b:00007ffabfaaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.028120][ T6201] RAX: ffffffffffffffda RBX: 00007ffabedc5fa0 RCX: 00007ffabeb8ebe9 [ 91.028126][ T6201] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 91.028132][ T6201] RBP: 00007ffabfaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.028137][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.028143][ T6201] R13: 00007ffabedc6038 R14: 00007ffabedc5fa0 R15: 00007fff78c77708 [ 91.028156][ T6201] [ 91.119825][ T6179] bridge0: port 3(team0) entered blocking state [ 91.120585][ T6179] bridge0: port 3(team0) entered forwarding state [ 92.272802][ T6220] libceph: resolve '400' (ret=-3): failed [ 92.596944][ T30] audit: type=1400 audit(1757443431.592:274): avc: denied { shutdown } for pid=6219 comm="syz.4.56" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.618303][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.984945][ T6225] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 93.502792][ T30] audit: type=1400 audit(1757443432.522:275): avc: denied { create } for pid=6230 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.502962][ T30] audit: type=1400 audit(1757443432.522:276): avc: denied { getopt } for pid=6230 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.996388][ T30] audit: type=1400 audit(1757443432.962:277): avc: denied { create } for pid=6226 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.022690][ T30] audit: type=1400 audit(1757443432.972:278): avc: denied { write } for pid=6226 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.518251][ T6225] batman_adv: batadv0: Adding interface: team0 [ 94.555892][ T6240] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 94.564456][ T6240] netlink: 2 bytes leftover after parsing attributes in process `syz.2.55'. [ 94.707277][ T30] audit: type=1400 audit(1757443433.732:279): avc: denied { connect } for pid=6244 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.729076][ T6225] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.869963][ T30] audit: type=1400 audit(1757443433.882:280): avc: denied { create } for pid=6241 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.985546][ T6225] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 95.130584][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.197914][ T6240] team0: entered promiscuous mode [ 95.233726][ T6240] team_slave_0: entered promiscuous mode [ 95.256545][ T6240] team_slave_1: entered promiscuous mode [ 95.340159][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.484277][ T6240] batman_adv: batadv0: Interface activated: team0 [ 95.500592][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.567541][ T6240] batman_adv: batadv0: Interface deactivated: team0 [ 95.585677][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.618780][ T6240] batman_adv: batadv0: Removing interface: team0 [ 95.637911][ T6240] bridge0: port 3(team0) entered blocking state [ 95.645761][ T6240] bridge0: port 3(team0) entered disabled state [ 95.654106][ T6240] team0: entered allmulticast mode [ 95.659584][ T6240] team_slave_0: entered allmulticast mode [ 95.668830][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.695823][ T6240] team_slave_1: entered allmulticast mode [ 95.718871][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.749940][ T6240] bridge0: port 3(team0) entered blocking state [ 95.756310][ T6240] bridge0: port 3(team0) entered forwarding state [ 95.766171][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.794435][ T5919] usb 4-1: config 0 descriptor?? [ 96.015897][ T30] audit: type=1400 audit(1757443435.042:281): avc: denied { bind } for pid=6253 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.026978][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 96.035391][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.036322][ T6254] Bluetooth: MGMT ver 1.23 [ 96.080979][ T30] audit: type=1400 audit(1757443435.072:282): avc: denied { write } for pid=6253 comm="syz.4.64" path="socket:[9863]" dev="sockfs" ino=9863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.160790][ T30] audit: type=1400 audit(1757443435.142:283): avc: denied { write } for pid=6253 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.325265][ T30] audit: type=1400 audit(1757443435.352:284): avc: denied { connect } for pid=6262 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.752915][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 96.766134][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 96.776778][ T5919] usb 4-1: USB disconnect, device number 3 [ 96.839845][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.68'. [ 96.868171][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.68'. [ 96.957172][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 96.970640][ T923] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.032745][ T6275] atomic_op ffff8880307fb998 conn xmit_atomic 0000000000000000 [ 97.039691][ T6271] sp0: Synchronizing with TNC [ 97.151691][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.243246][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.263684][ T923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.277508][ T923] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.289591][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.419815][ T923] usb 5-1: config 0 descriptor?? [ 97.426544][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 97.446942][ T6281] bond0: entered promiscuous mode [ 97.458182][ T6281] bond_slave_0: entered promiscuous mode [ 97.464694][ T6281] bond_slave_1: entered promiscuous mode [ 97.491031][ T6281] bond0: left promiscuous mode [ 97.495887][ T6281] bond_slave_0: left promiscuous mode [ 97.502696][ T6281] bond_slave_1: left promiscuous mode [ 97.741093][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.756423][ T6270] [U] è [ 97.851386][ T6292] mmap: syz.3.75 (6292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.942227][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 97.954191][ T923] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.967830][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.029015][ T24] usb 2-1: config 0 has no interface number 0 [ 98.070111][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.182379][ T923] usb 5-1: USB disconnect, device number 4 [ 98.204003][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.226245][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 98.235666][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.256524][ T24] usb 2-1: Product: syz [ 98.266524][ T24] usb 2-1: Manufacturer: syz [ 98.273233][ T24] usb 2-1: SerialNumber: syz [ 98.296279][ T24] usb 2-1: config 0 descriptor?? [ 98.480007][ T6298] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 98.522746][ T6298] bridge0: port 3(team0) entered disabled state [ 98.656102][ T6293] fido_id[6293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.707595][ T6298] team0: left allmulticast mode [ 98.749120][ T6299] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 98.792213][ T6298] team_slave_0: left allmulticast mode [ 98.797848][ T6298] team_slave_1: left allmulticast mode [ 98.804711][ T6298] team0: left promiscuous mode [ 98.822619][ T6298] team_slave_0: left promiscuous mode [ 98.826139][ T977] usb 2-1: USB disconnect, device number 3 [ 98.858942][ T6298] team_slave_1: left promiscuous mode [ 98.867316][ T6298] bridge0: port 3(team0) entered disabled state [ 98.933283][ T6299] netlink: 2 bytes leftover after parsing attributes in process `syz.0.76'. [ 99.298994][ T6298] batman_adv: batadv0: Adding interface: team0 [ 99.319031][ T6298] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.516469][ T6298] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 99.553909][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 99.553927][ T30] audit: type=1400 audit(1757443438.562:302): avc: denied { execute } for pid=6312 comm="syz.1.81" path="/13/rdma.current" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.709972][ T6299] team0: entered promiscuous mode [ 99.782927][ T30] audit: type=1400 audit(1757443438.812:303): avc: denied { setopt } for pid=6312 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.806978][ T6299] team_slave_0: entered promiscuous mode [ 99.819857][ T6299] team_slave_1: entered promiscuous mode [ 99.826062][ T30] audit: type=1400 audit(1757443438.832:304): avc: denied { read } for pid=6312 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.915999][ T30] audit: type=1400 audit(1757443438.942:305): avc: denied { create } for pid=6322 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.966194][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.004285][ T6299] batman_adv: batadv0: Interface activated: team0 [ 100.015259][ T30] audit: type=1400 audit(1757443438.942:306): avc: denied { write } for pid=6322 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.050360][ T6299] batman_adv: batadv0: Interface deactivated: team0 [ 100.068453][ T30] audit: type=1400 audit(1757443439.092:307): avc: denied { read } for pid=6327 comm="syz.2.86" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.092027][ T6326] overlayfs: cannot append lower layer [ 100.097573][ T6299] batman_adv: batadv0: Removing interface: team0 [ 100.098995][ T30] audit: type=1400 audit(1757443439.092:308): avc: denied { open } for pid=6327 comm="syz.2.86" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.170786][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.214174][ T6299] bridge0: port 3(team0) entered blocking state [ 100.239012][ T6299] bridge0: port 3(team0) entered disabled state [ 100.251743][ T6299] team0: entered allmulticast mode [ 100.257012][ T6299] team_slave_0: entered allmulticast mode [ 100.263577][ T6299] team_slave_1: entered allmulticast mode [ 100.283607][ T6338] ptrace attach of "./syz-executor exec"[5856] was attempted by ""[6338] [ 100.311654][ T30] audit: type=1400 audit(1757443439.302:309): avc: denied { getopt } for pid=6332 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.330584][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 100.337208][ T6299] bridge0: port 3(team0) entered blocking state [ 100.341913][ T6340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.343589][ T6299] bridge0: port 3(team0) entered forwarding state [ 100.356110][ T30] audit: type=1400 audit(1757443439.302:310): avc: denied { write } for pid=6332 comm="syz.1.87" lport=33576 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.393693][ T30] audit: type=1400 audit(1757443439.312:311): avc: denied { setopt } for pid=6332 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.475706][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.498164][ T24] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 100.528632][ T6319] macvlan2: entered promiscuous mode [ 100.534066][ T24] usb 5-1: config 2 has no interface number 0 [ 100.547343][ T6319] macvlan2: entered allmulticast mode [ 100.579101][ T24] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=fd.38 [ 100.600598][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.624280][ T24] usb 5-1: Product: syz [ 100.634387][ T24] usb 5-1: Manufacturer: syz [ 100.640859][ T977] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.651184][ T24] usb 5-1: SerialNumber: syz [ 100.792810][ T977] usb 3-1: config 8 interface 0 has no altsetting 0 [ 100.799724][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 100.826628][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.899121][ T24] ftdi_sio 5-1:2.79: FTDI USB Serial Device converter detected [ 100.996556][ T24] ftdi_sio ttyUSB0: unknown device type: 0xfd38 [ 101.075320][ T977] usb 3-1: string descriptor 0 read error: -71 [ 101.093263][ T977] pwc: Logitech QuickCam detected (reserved ID). [ 101.202788][ T977] pwc: Failed to set LED on/off time (-71) [ 101.214904][ T24] usb 5-1: USB disconnect, device number 5 [ 101.225280][ T977] pwc: send_video_command error -71 [ 101.230037][ T24] ftdi_sio 5-1:2.79: device disconnected [ 101.230944][ T977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 101.250574][ T977] Philips webcam 3-1:8.0: probe with driver Philips webcam failed with error -71 [ 101.270255][ T977] usb 3-1: USB disconnect, device number 3 [ 101.270757][ T54] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.469564][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.91'. [ 101.483378][ T54] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.484042][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.91'. [ 101.514882][ T54] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 101.526622][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.579531][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.599213][ T54] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 101.609983][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.618114][ T54] usb 1-1: Product: syz [ 101.622321][ T54] usb 1-1: Manufacturer: syz [ 101.627119][ T54] usb 1-1: SerialNumber: syz [ 101.665108][ T54] usb 1-1: config 0 descriptor?? [ 101.690988][ T6361] FAULT_INJECTION: forcing a failure. [ 101.690988][ T6361] name failslab, interval 1, probability 0, space 0, times 1 [ 101.750623][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.4.94 Not tainted syzkaller #0 PREEMPT(full) [ 101.750648][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.750657][ T6361] Call Trace: [ 101.750663][ T6361] [ 101.750670][ T6361] dump_stack_lvl+0x16c/0x1f0 [ 101.750693][ T6361] should_fail_ex+0x512/0x640 [ 101.750713][ T6361] should_failslab+0xc2/0x120 [ 101.750730][ T6361] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 101.750746][ T6361] ? skb_clone+0x190/0x3f0 [ 101.750766][ T6361] skb_clone+0x190/0x3f0 [ 101.750782][ T6361] netlink_deliver_tap+0xabd/0xd30 [ 101.750804][ T6361] netlink_unicast+0x64c/0x870 [ 101.750824][ T6361] ? __pfx_netlink_unicast+0x10/0x10 [ 101.750841][ T6361] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 101.750864][ T6361] netlink_sendmsg+0x8d1/0xdd0 [ 101.750884][ T6361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.750908][ T6361] ____sys_sendmsg+0xa98/0xc70 [ 101.750929][ T6361] ? copy_msghdr_from_user+0x10a/0x160 [ 101.750945][ T6361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.750974][ T6361] ___sys_sendmsg+0x134/0x1d0 [ 101.750991][ T6361] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.751032][ T6361] __sys_sendmsg+0x16d/0x220 [ 101.751048][ T6361] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.751084][ T6361] do_syscall_64+0xcd/0x4c0 [ 101.751102][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.751115][ T6361] RIP: 0033:0x7fb525b8ebe9 [ 101.751126][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.751138][ T6361] RSP: 002b:00007fb526a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.751151][ T6361] RAX: ffffffffffffffda RBX: 00007fb525dc5fa0 RCX: 00007fb525b8ebe9 [ 101.751160][ T6361] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 101.751167][ T6361] RBP: 00007fb526a25090 R08: 0000000000000000 R09: 0000000000000000 [ 101.751174][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.751181][ T6361] R13: 00007fb525dc6038 R14: 00007fb525dc5fa0 R15: 00007fff08df7768 [ 101.751200][ T6361] [ 101.964939][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.994828][ T6346] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 102.060596][ T6346] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 102.089941][ T6346] overlayfs: failed to get uuid (15/file0, err=-13); falling back to uuid=null. [ 102.141930][ T54] usb 1-1: USB disconnect, device number 3 [ 103.180674][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.381717][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.410644][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.431357][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.440452][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 103.512826][ T24] usb 5-1: SerialNumber: syz [ 103.538723][ T6387] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 103.594452][ T6389] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 103.594568][ T6387] bridge0: port 3(team0) entered disabled state [ 103.643812][ T6387] team0: left allmulticast mode [ 103.666732][ T6389] netlink: 2 bytes leftover after parsing attributes in process `syz.0.100'. [ 103.723291][ T6387] team_slave_0: left allmulticast mode [ 103.738934][ T6387] team_slave_1: left allmulticast mode [ 103.756737][ T6387] team0: left promiscuous mode [ 103.767624][ T24] usb 5-1: skipping empty audio interface (v1) [ 103.785956][ T6387] team_slave_0: left promiscuous mode [ 103.851356][ T6387] team_slave_1: left promiscuous mode [ 103.860179][ T6387] bridge0: port 3(team0) entered disabled state [ 103.887605][ T6387] batman_adv: batadv0: Adding interface: team0 [ 103.895735][ T6387] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.933869][ T6396] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 103.950747][ T6387] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 103.964725][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 103.991366][ T6389] team0: entered promiscuous mode [ 103.998856][ T24] usb 5-1: USB disconnect, device number 6 [ 104.121018][ T6398] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 104.192146][ T6389] team_slave_0: entered promiscuous mode [ 104.218482][ T6389] team_slave_1: entered promiscuous mode [ 104.234438][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.284011][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.294381][ T6389] batman_adv: batadv0: Interface activated: team0 [ 104.308907][ T6389] batman_adv: batadv0: Interface deactivated: team0 [ 104.340623][ T6389] batman_adv: batadv0: Removing interface: team0 [ 104.367824][ T6389] bridge0: port 3(team0) entered blocking state [ 104.374861][ T6389] bridge0: port 3(team0) entered disabled state [ 104.397882][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.104'. [ 104.410157][ T6389] team0: entered allmulticast mode [ 104.433030][ T6389] team_slave_0: entered allmulticast mode [ 104.462991][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.104'. [ 104.476914][ T6389] team_slave_1: entered allmulticast mode [ 104.488826][ T6389] bridge0: port 3(team0) entered blocking state [ 104.495180][ T6389] bridge0: port 3(team0) entered forwarding state [ 104.758920][ T6417] FAULT_INJECTION: forcing a failure. [ 104.758920][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 104.868984][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 104.869011][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.869021][ T6417] Call Trace: [ 104.869027][ T6417] [ 104.869033][ T6417] dump_stack_lvl+0x16c/0x1f0 [ 104.869061][ T6417] should_fail_ex+0x512/0x640 [ 104.869080][ T6417] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 104.869100][ T6417] should_failslab+0xc2/0x120 [ 104.869119][ T6417] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 104.869135][ T6417] ? skb_clone+0x190/0x3f0 [ 104.869158][ T6417] skb_clone+0x190/0x3f0 [ 104.869179][ T6417] nfnetlink_rcv_batch+0x1cf/0x2330 [ 104.869204][ T6417] ? __lock_acquire+0x62e/0x1ce0 [ 104.869231][ T6417] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 104.869263][ T6417] ? avc_has_perm_noaudit+0x149/0x3b0 [ 104.869291][ T6417] ? __asan_memset+0x23/0x50 [ 104.869315][ T6417] ? __nla_validate_parse+0x600/0x2880 [ 104.869346][ T6417] ? __pfx___nla_validate_parse+0x10/0x10 [ 104.869371][ T6417] ? cap_capable+0xb3/0x250 [ 104.869396][ T6417] ? __nla_parse+0x40/0x60 [ 104.869424][ T6417] nfnetlink_rcv+0x3c1/0x430 [ 104.869440][ T6417] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 104.869463][ T6417] netlink_unicast+0x5aa/0x870 [ 104.869490][ T6417] ? __pfx_netlink_unicast+0x10/0x10 [ 104.869512][ T6417] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 104.869541][ T6417] netlink_sendmsg+0x8d1/0xdd0 [ 104.869567][ T6417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.869599][ T6417] ____sys_sendmsg+0xa98/0xc70 [ 104.869625][ T6417] ? copy_msghdr_from_user+0x10a/0x160 [ 104.869646][ T6417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.869682][ T6417] ___sys_sendmsg+0x134/0x1d0 [ 104.869704][ T6417] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.869754][ T6417] __sys_sendmsg+0x16d/0x220 [ 104.869774][ T6417] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.869810][ T6417] do_syscall_64+0xcd/0x4c0 [ 104.869834][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.869851][ T6417] RIP: 0033:0x7f2afc38ebe9 [ 104.869865][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.869881][ T6417] RSP: 002b:00007f2afd172038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.869897][ T6417] RAX: ffffffffffffffda RBX: 00007f2afc5c5fa0 RCX: 00007f2afc38ebe9 [ 104.869907][ T6417] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.869915][ T6417] RBP: 00007f2afd172090 R08: 0000000000000000 R09: 0000000000000000 [ 104.869924][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.869933][ T6417] R13: 00007f2afc5c6038 R14: 00007f2afc5c5fa0 R15: 00007ffe00598028 [ 104.869953][ T6417] [ 105.130418][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.297818][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.306611][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.344140][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 105.344156][ T30] audit: type=1400 audit(1757443444.372:316): avc: denied { append } for pid=6426 comm="syz.2.111" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.530699][ T54] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.906747][ T54] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 106.176537][ T54] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 106.212663][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.117'. [ 106.226547][ T54] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59241, setting to 1024 [ 106.251671][ T54] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 106.265032][ T54] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 106.277728][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.288862][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.117'. [ 106.289375][ T54] usb 5-1: Manufacturer: syz [ 106.327551][ T6455] netlink: 148 bytes leftover after parsing attributes in process `syz.3.118'. [ 106.352247][ T54] usb 5-1: SerialNumber: syz [ 106.445779][ T6459] FAULT_INJECTION: forcing a failure. [ 106.445779][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 106.464999][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(full) [ 106.465025][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.465034][ T6459] Call Trace: [ 106.465040][ T6459] [ 106.465046][ T6459] dump_stack_lvl+0x16c/0x1f0 [ 106.465073][ T6459] should_fail_ex+0x512/0x640 [ 106.465094][ T6459] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 106.465123][ T6459] should_failslab+0xc2/0x120 [ 106.465143][ T6459] __kmalloc_cache_noprof+0x6a/0x3e0 [ 106.465166][ T6459] ? net_generic+0xf4/0x2a0 [ 106.465187][ T6459] ? nf_tables_newtable+0xd67/0x1b40 [ 106.465206][ T6459] nf_tables_newtable+0xd67/0x1b40 [ 106.465226][ T6459] ? __pfx___nla_validate_parse+0x10/0x10 [ 106.465255][ T6459] ? __pfx_nf_tables_newtable+0x10/0x10 [ 106.465284][ T6459] ? __nla_parse+0x40/0x60 [ 106.465312][ T6459] nfnetlink_rcv_batch+0x18ed/0x2330 [ 106.465343][ T6459] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 106.465376][ T6459] ? avc_has_perm_noaudit+0x149/0x3b0 [ 106.465421][ T6459] ? __nla_parse+0x40/0x60 [ 106.465449][ T6459] nfnetlink_rcv+0x3c1/0x430 [ 106.465464][ T6459] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 106.465491][ T6459] netlink_unicast+0x5aa/0x870 [ 106.465516][ T6459] ? __pfx_netlink_unicast+0x10/0x10 [ 106.465538][ T6459] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 106.465567][ T6459] netlink_sendmsg+0x8d1/0xdd0 [ 106.465593][ T6459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.465626][ T6459] ____sys_sendmsg+0xa98/0xc70 [ 106.465653][ T6459] ? copy_msghdr_from_user+0x10a/0x160 [ 106.465672][ T6459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.465709][ T6459] ___sys_sendmsg+0x134/0x1d0 [ 106.465730][ T6459] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.465784][ T6459] __sys_sendmsg+0x16d/0x220 [ 106.465805][ T6459] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.465844][ T6459] do_syscall_64+0xcd/0x4c0 [ 106.465866][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.465884][ T6459] RIP: 0033:0x7fda35f8ebe9 [ 106.465897][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.465913][ T6459] RSP: 002b:00007fda36d90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.465928][ T6459] RAX: ffffffffffffffda RBX: 00007fda361c5fa0 RCX: 00007fda35f8ebe9 [ 106.465939][ T6459] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.465949][ T6459] RBP: 00007fda36d90090 R08: 0000000000000000 R09: 0000000000000000 [ 106.465958][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.465967][ T6459] R13: 00007fda361c6038 R14: 00007fda361c5fa0 R15: 00007ffcb98f5fe8 [ 106.465990][ T6459] [ 106.754101][ T54] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 106.967325][ T30] audit: type=1400 audit(1757443445.982:317): avc: denied { bind } for pid=6461 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.014517][ T54] usb 5-1: USB disconnect, device number 7 [ 107.091180][ T6469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.112133][ T30] audit: type=1400 audit(1757443445.982:318): avc: denied { write } for pid=6461 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.495224][ T30] audit: type=1400 audit(1757443446.512:319): avc: denied { write } for pid=6480 comm="syz.4.127" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.040247][ T6487] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.113486][ T30] audit: type=1400 audit(1757443447.132:320): avc: denied { map } for pid=6488 comm="syz.0.130" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.246709][ T30] audit: type=1400 audit(1757443447.132:321): avc: denied { execute } for pid=6488 comm="syz.0.130" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.293861][ T30] audit: type=1400 audit(1757443447.142:322): avc: denied { ioctl } for pid=6488 comm="syz.0.130" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.343497][ T30] audit: type=1400 audit(1757443447.262:323): avc: denied { bind } for pid=6492 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.364649][ T977] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.489700][ T30] audit: type=1400 audit(1757443447.502:324): avc: denied { mounton } for pid=6497 comm="syz.2.132" path="/28/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.526202][ T6500] FAULT_INJECTION: forcing a failure. [ 108.526202][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 108.540677][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) [ 108.540698][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.540706][ T6500] Call Trace: [ 108.540711][ T6500] [ 108.540718][ T6500] dump_stack_lvl+0x16c/0x1f0 [ 108.540744][ T6500] should_fail_ex+0x512/0x640 [ 108.540764][ T6500] ? __kmalloc_noprof+0xbf/0x510 [ 108.540784][ T6500] ? nla_strdup+0xc6/0x150 [ 108.540805][ T6500] should_failslab+0xc2/0x120 [ 108.540826][ T6500] __kmalloc_noprof+0xd2/0x510 [ 108.540849][ T6500] nla_strdup+0xc6/0x150 [ 108.540873][ T6500] nf_tables_newtable+0xdeb/0x1b40 [ 108.540910][ T6500] ? __pfx___nla_validate_parse+0x10/0x10 [ 108.540938][ T6500] ? __pfx_nf_tables_newtable+0x10/0x10 [ 108.540960][ T6500] ? __nla_parse+0x40/0x60 [ 108.540990][ T6500] nfnetlink_rcv_batch+0x18ed/0x2330 [ 108.541027][ T6500] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 108.541060][ T6500] ? avc_has_perm_noaudit+0x149/0x3b0 [ 108.541105][ T6500] ? __nla_parse+0x40/0x60 [ 108.541133][ T6500] nfnetlink_rcv+0x3c1/0x430 [ 108.541149][ T6500] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.541172][ T6500] netlink_unicast+0x5aa/0x870 [ 108.541199][ T6500] ? __pfx_netlink_unicast+0x10/0x10 [ 108.541221][ T6500] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 108.541250][ T6500] netlink_sendmsg+0x8d1/0xdd0 [ 108.541276][ T6500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.541309][ T6500] ____sys_sendmsg+0xa98/0xc70 [ 108.541336][ T6500] ? copy_msghdr_from_user+0x10a/0x160 [ 108.541356][ T6500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.541400][ T6500] ___sys_sendmsg+0x134/0x1d0 [ 108.541422][ T6500] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.541474][ T6500] __sys_sendmsg+0x16d/0x220 [ 108.541496][ T6500] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.541534][ T6500] do_syscall_64+0xcd/0x4c0 [ 108.541558][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.541575][ T6500] RIP: 0033:0x7fb525b8ebe9 [ 108.541588][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.541604][ T6500] RSP: 002b:00007fb526a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.541619][ T6500] RAX: ffffffffffffffda RBX: 00007fb525dc5fa0 RCX: 00007fb525b8ebe9 [ 108.541629][ T6500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 108.541638][ T6500] RBP: 00007fb526a25090 R08: 0000000000000000 R09: 0000000000000000 [ 108.541648][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.541656][ T6500] R13: 00007fb525dc6038 R14: 00007fb525dc5fa0 R15: 00007fff08df7768 [ 108.541679][ T6500] [ 108.545670][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 108.826158][ T977] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.835448][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.843521][ T977] usb 1-1: Product: syz [ 108.857857][ T977] usb 1-1: Manufacturer: syz [ 108.862563][ T977] usb 1-1: SerialNumber: syz [ 108.879758][ T977] usb 1-1: config 0 descriptor?? [ 108.921448][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.990598][ T30] audit: type=1400 audit(1757443448.012:325): avc: denied { open } for pid=6505 comm="syz.1.135" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 109.014036][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.120358][ T977] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.132982][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 109.513885][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.526251][ T54] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 109.539360][ T54] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 109.565678][ T54] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 109.592481][ T54] usb 5-1: config 128 has no interface number 0 [ 109.605982][ T54] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 109.634006][ T54] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.653714][ T54] usb 5-1: config 128 interface 127 has no altsetting 0 [ 109.671666][ T54] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 109.683734][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.706168][ T54] usb 5-1: Product: syz [ 109.716006][ T54] usb 5-1: Manufacturer: syz [ 109.726605][ T54] usb 5-1: SerialNumber: syz [ 110.405152][ T977] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 110.463900][ T977] usb 1-1: USB disconnect, device number 4 [ 110.573206][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 110.573221][ T30] audit: type=1400 audit(1757443449.602:327): avc: denied { create } for pid=6533 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 110.695244][ T6541] FAULT_INJECTION: forcing a failure. [ 110.695244][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 110.748342][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(full) [ 110.748367][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.748376][ T6541] Call Trace: [ 110.748383][ T6541] [ 110.748390][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 110.748418][ T6541] should_fail_ex+0x512/0x640 [ 110.748436][ T6541] ? __kvmalloc_node_noprof+0x124/0x620 [ 110.748452][ T6541] should_failslab+0xc2/0x120 [ 110.748469][ T6541] __kvmalloc_node_noprof+0x137/0x620 [ 110.748486][ T6541] ? bucket_table_alloc.isra.0+0x83/0x460 [ 110.748511][ T6541] ? bucket_table_alloc.isra.0+0x83/0x460 [ 110.748529][ T6541] bucket_table_alloc.isra.0+0x83/0x460 [ 110.748551][ T6541] rhashtable_init_noprof+0x41a/0x7e0 [ 110.748575][ T6541] rhltable_init_noprof+0x20/0x60 [ 110.748596][ T6541] nf_tables_newtable+0xf94/0x1b40 [ 110.748618][ T6541] ? __pfx___nla_validate_parse+0x10/0x10 [ 110.748643][ T6541] ? __pfx_nf_tables_newtable+0x10/0x10 [ 110.748665][ T6541] ? __nla_parse+0x40/0x60 [ 110.748691][ T6541] nfnetlink_rcv_batch+0x18ed/0x2330 [ 110.748719][ T6541] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 110.748752][ T6541] ? avc_has_perm_noaudit+0x149/0x3b0 [ 110.748795][ T6541] ? __nla_parse+0x40/0x60 [ 110.748824][ T6541] nfnetlink_rcv+0x3c1/0x430 [ 110.748840][ T6541] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.748864][ T6541] netlink_unicast+0x5aa/0x870 [ 110.748890][ T6541] ? __pfx_netlink_unicast+0x10/0x10 [ 110.748912][ T6541] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 110.748941][ T6541] netlink_sendmsg+0x8d1/0xdd0 [ 110.748967][ T6541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.749009][ T6541] ____sys_sendmsg+0xa98/0xc70 [ 110.749036][ T6541] ? copy_msghdr_from_user+0x10a/0x160 [ 110.749056][ T6541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.749092][ T6541] ___sys_sendmsg+0x134/0x1d0 [ 110.749115][ T6541] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.749168][ T6541] __sys_sendmsg+0x16d/0x220 [ 110.749188][ T6541] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.749226][ T6541] do_syscall_64+0xcd/0x4c0 [ 110.749250][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.749267][ T6541] RIP: 0033:0x7fda35f8ebe9 [ 110.749281][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.749297][ T6541] RSP: 002b:00007fda36d90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.749313][ T6541] RAX: ffffffffffffffda RBX: 00007fda361c5fa0 RCX: 00007fda35f8ebe9 [ 110.749323][ T6541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 110.749333][ T6541] RBP: 00007fda36d90090 R08: 0000000000000000 R09: 0000000000000000 [ 110.749343][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.749352][ T6541] R13: 00007fda361c6038 R14: 00007fda361c5fa0 R15: 00007ffcb98f5fe8 [ 110.749376][ T6541] [ 111.170643][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.331032][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 111.338067][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 111.441714][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 111.470102][ T6489] Trying to write to read-only block-device nullb0 [ 111.481388][ T5904] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 111.490739][ T5904] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 111.519311][ T5904] usb 4-1: Product: syz [ 111.526875][ T5904] usb 4-1: Manufacturer: syz [ 111.533712][ T5904] usb 4-1: SerialNumber: syz [ 111.588230][ T5904] usb 4-1: config 0 descriptor?? [ 111.679777][ T5904] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 111.732540][ T54] usb 5-1: USB disconnect, device number 8 [ 111.791495][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.146'. [ 111.795166][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.877529][ T6539] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 111.927902][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 111.950319][ T30] audit: type=1400 audit(1757443450.952:328): avc: denied { nlmsg_read } for pid=6553 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.997428][ T54] usb 4-1: USB disconnect, device number 4 [ 112.008723][ T48] usb 4-1: Failed to submit usb control message: -71 [ 112.032728][ T48] usb 4-1: unable to send the bmi data to the device: -71 [ 112.058972][ T30] audit: type=1400 audit(1757443451.072:329): avc: denied { read } for pid=6553 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.060846][ T48] usb 4-1: unable to get target info from device [ 112.078799][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.179901][ T48] usb 4-1: could not get target info (-71) [ 112.194096][ T48] usb 4-1: could not probe fw (-71) [ 112.398307][ T48] Bluetooth: Error in BCSP hdr checksum [ 112.453919][ T30] audit: type=1400 audit(1757443451.482:330): avc: denied { setopt } for pid=6566 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.620657][ T923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.780654][ T923] usb 3-1: Using ep0 maxpacket: 16 [ 112.789409][ T923] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.799029][ T923] usb 3-1: config 0 has no interface number 0 [ 112.807946][ T923] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.818362][ T923] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.831058][ T923] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.863306][ T923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.934108][ T923] usb 3-1: Product: syz [ 112.938297][ T923] usb 3-1: Manufacturer: syz [ 112.970849][ T923] usb 3-1: SerialNumber: syz [ 112.978970][ T923] usb 3-1: config 0 descriptor?? [ 112.984931][ T6564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.996235][ T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.004264][ T6564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.004598][ T6579] FAULT_INJECTION: forcing a failure. [ 113.004598][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 113.035764][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 113.035787][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.035797][ T6579] Call Trace: [ 113.035803][ T6579] [ 113.035809][ T6579] dump_stack_lvl+0x16c/0x1f0 [ 113.035836][ T6579] should_fail_ex+0x512/0x640 [ 113.035857][ T6579] ? __kmalloc_noprof+0xbf/0x510 [ 113.035879][ T6579] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 113.035898][ T6579] should_failslab+0xc2/0x120 [ 113.035917][ T6579] __kmalloc_noprof+0xd2/0x510 [ 113.035932][ T6579] ? lockdep_init_map_type+0x5c/0x280 [ 113.035950][ T6579] ? rhashtable_init_noprof+0x55e/0x7e0 [ 113.035983][ T6579] nft_trans_alloc_gfp+0x26/0x2e0 [ 113.036004][ T6579] nf_tables_newtable+0x1387/0x1b40 [ 113.036029][ T6579] ? __pfx_nf_tables_newtable+0x10/0x10 [ 113.036050][ T6579] ? __nla_parse+0x40/0x60 [ 113.036078][ T6579] nfnetlink_rcv_batch+0x18ed/0x2330 [ 113.036108][ T6579] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 113.036143][ T6579] ? avc_has_perm_noaudit+0x149/0x3b0 [ 113.036190][ T6579] ? __nla_parse+0x40/0x60 [ 113.036212][ T6579] nfnetlink_rcv+0x3c1/0x430 [ 113.036225][ T6579] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.036243][ T6579] netlink_unicast+0x5aa/0x870 [ 113.036264][ T6579] ? __pfx_netlink_unicast+0x10/0x10 [ 113.036281][ T6579] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 113.036303][ T6579] netlink_sendmsg+0x8d1/0xdd0 [ 113.036323][ T6579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.036348][ T6579] ____sys_sendmsg+0xa98/0xc70 [ 113.036371][ T6579] ? copy_msghdr_from_user+0x10a/0x160 [ 113.036388][ T6579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.036421][ T6579] ___sys_sendmsg+0x134/0x1d0 [ 113.036442][ T6579] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.036490][ T6579] __sys_sendmsg+0x16d/0x220 [ 113.036509][ T6579] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.036542][ T6579] do_syscall_64+0xcd/0x4c0 [ 113.036567][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.036582][ T6579] RIP: 0033:0x7f350e78ebe9 [ 113.036597][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.036612][ T6579] RSP: 002b:00007f350f6d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.036627][ T6579] RAX: ffffffffffffffda RBX: 00007f350e9c5fa0 RCX: 00007f350e78ebe9 [ 113.036637][ T6579] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 113.036645][ T6579] RBP: 00007f350f6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.036654][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.036662][ T6579] R13: 00007f350e9c6038 R14: 00007f350e9c5fa0 R15: 00007ffda71f3498 [ 113.036683][ T6579] [ 113.043045][ T30] audit: type=1400 audit(1757443452.062:331): avc: denied { ioctl } for pid=6571 comm="syz.3.153" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11657 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.140723][ T54] usb 2-1: device descriptor read/64, error -71 [ 113.332687][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.381378][ T6564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.388778][ T6564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.594121][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 113.641205][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.666352][ T6584] macvlan2: entered promiscuous mode [ 113.681148][ T6584] macvlan2: entered allmulticast mode [ 113.689229][ T6584] bond1: entered promiscuous mode [ 113.690820][ T54] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.731632][ T6584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.759360][ T6586] process 'syz.0.157' launched './file0' with NULL argv: empty string added [ 113.795544][ T6584] bond1: left promiscuous mode [ 113.798615][ T30] audit: type=1400 audit(1757443452.812:332): avc: denied { execute_no_trans } for pid=6583 comm="syz.0.157" path="/26/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.831898][ T54] usb 2-1: device descriptor read/64, error -71 [ 113.876671][ T923] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 113.887414][ T923] asix 3-1:0.251: probe with driver asix failed with error -524 [ 113.942429][ T54] usb usb2-port1: attempt power cycle [ 114.003721][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.010264][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 114.098959][ T977] usb 3-1: USB disconnect, device number 4 [ 114.140817][ T30] audit: type=1400 audit(1757443453.162:333): avc: denied { create } for pid=6587 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.304421][ T5919] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.335218][ T6605] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 114.350579][ T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.392214][ T54] usb 2-1: device descriptor read/8, error -71 [ 114.561827][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 114.850537][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 114.860319][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.874576][ T5919] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 114.923477][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.964054][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.978269][ T5919] usb 1-1: config 0 descriptor?? [ 115.135515][ T30] audit: type=1400 audit(1757443454.152:335): avc: denied { read } for pid=6611 comm="syz.3.165" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.171545][ T30] audit: type=1400 audit(1757443454.152:334): avc: denied { read } for pid=6611 comm="syz.3.165" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.174686][ T54] usb 2-1: device descriptor read/8, error -71 [ 115.213737][ T6593] warning: `syz.0.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.225593][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.316505][ T30] audit: type=1400 audit(1757443454.152:337): avc: denied { ioctl } for pid=6611 comm="syz.3.165" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.341066][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.541246][ T54] usb usb2-port1: unable to enumerate USB device [ 115.607931][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 115.607943][ T30] audit: type=1400 audit(1757443454.632:341): avc: denied { setattr } for pid=5843 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.670903][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 115.685880][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.699555][ T9] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 115.707780][ T9] usb 5-1: config 8 has no interface number 0 [ 115.714000][ T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 115.725662][ T9] usb 5-1: config 8 interface 24 has no altsetting 0 [ 115.830624][ T54] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 115.989858][ T30] audit: type=1400 audit(1757443455.012:342): avc: denied { write } for pid=6621 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.012602][ T54] usb 3-1: device descriptor read/64, error -71 [ 116.025927][ T9] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 116.341192][ T54] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 116.389759][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.408854][ T9] usb 5-1: Product: syz [ 116.451003][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.505235][ T9] usb 5-1: Manufacturer: syz [ 116.513900][ T9] usb 5-1: SerialNumber: syz [ 116.520637][ T54] usb 3-1: device descriptor read/64, error -71 [ 116.642945][ T54] usb usb3-port1: attempt power cycle [ 116.666558][ T5919] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 116.740855][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.889523][ T5919] usb 2-1: config 0 has no interface number 0 [ 117.010758][ T5919] usb 2-1: New USB device found, idVendor=7ff8, idProduct=30ff, bcdDevice=39.64 [ 117.019890][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.028030][ T5919] usb 2-1: Product: syz [ 117.030775][ T54] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.032484][ T5919] usb 2-1: Manufacturer: syz [ 117.045517][ T5919] usb 2-1: SerialNumber: syz [ 117.061434][ T5919] usb 2-1: config 0 descriptor?? [ 117.066142][ T54] usb 3-1: device descriptor read/8, error -71 [ 117.120120][ T5919] uvcvideo 2-1:0.73: probe with driver uvcvideo failed with error -22 [ 117.188959][ T6024] usb 1-1: USB disconnect, device number 5 [ 117.327025][ T923] usb 2-1: USB disconnect, device number 8 [ 117.339185][ T30] audit: type=1400 audit(1757443456.352:343): avc: denied { ioctl } for pid=6621 comm="syz.1.167" path="socket:[11729]" dev="sockfs" ino=11729 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.365031][ T54] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 117.397786][ T6627] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 117.416731][ T54] usb 3-1: device descriptor read/8, error -71 [ 117.563051][ T54] usb usb3-port1: unable to enumerate USB device [ 118.294319][ T9] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 118.354985][ T9] usb 5-1: USB disconnect, device number 9 [ 118.508371][ T6639] fuse: Bad value for 'user_id' [ 118.513350][ T6639] fuse: Bad value for 'user_id' [ 120.260849][ T30] audit: type=1400 audit(1757443457.522:344): avc: denied { mount } for pid=6633 comm="syz.0.171" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.283691][ T30] audit: type=1400 audit(1757443457.532:345): avc: denied { mount } for pid=6633 comm="syz.0.171" name="/" dev="ramfs" ino=11760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 120.384328][ T30] audit: type=1400 audit(1757443459.412:346): avc: denied { mounton } for pid=6636 comm="syz.4.172" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 120.430291][ T30] audit: type=1400 audit(1757443459.452:347): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.686978][ T30] audit: type=1400 audit(1757443459.702:348): avc: denied { wake_alarm } for pid=6636 comm="syz.4.172" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.820787][ T54] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 121.107999][ T54] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.145748][ T54] usb 3-1: config 0 has no interface number 0 [ 121.187207][ T54] usb 3-1: config 0 interface 1 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.241636][ T54] usb 3-1: config 0 interface 1 has no altsetting 0 [ 121.286534][ T54] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 121.341052][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.439414][ T54] usb 3-1: config 0 descriptor?? [ 121.454678][ T54] usbhid 3-1:0.1: can't add hid device: -22 [ 121.480783][ T54] usbhid 3-1:0.1: probe with driver usbhid failed with error -22 [ 122.103415][ T30] audit: type=1400 audit(1757443461.122:349): avc: denied { setopt } for pid=6654 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.408859][ T5919] usb 3-1: USB disconnect, device number 9 [ 122.486059][ T30] audit: type=1400 audit(1757443461.512:350): avc: denied { append } for pid=6667 comm="syz.4.179" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.511117][ T5904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.558895][ T6671] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 122.594057][ T6671] netlink: 72 bytes leftover after parsing attributes in process `syz.2.180'. [ 122.625875][ T6671] netlink: 105 bytes leftover after parsing attributes in process `syz.2.180'. [ 122.680709][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 122.692250][ T5904] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.720606][ T5904] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.730368][ T5904] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.766249][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.780968][ T5904] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 122.799802][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.815852][ T5904] usb 2-1: config 0 descriptor?? [ 123.020732][ T5919] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.059063][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 123.092041][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 123.108993][ T5904] usb 2-1: USB disconnect, device number 9 [ 123.171196][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 123.184389][ T5919] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 123.195044][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.225504][ T5919] usb 1-1: Product: syz [ 123.238610][ T5919] usb 1-1: Manufacturer: syz [ 123.249885][ T5919] usb 1-1: SerialNumber: syz [ 123.274150][ T5919] usb 1-1: config 0 descriptor?? [ 123.276720][ T5919] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 123.476495][ T5919] gp8psk: usb in 128 operation failed. [ 123.496561][ T5919] gp8psk: usb in 137 operation failed. [ 123.518753][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.538117][ T5919] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 123.556289][ T5919] usb 1-1: media controller created [ 123.583391][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.755823][ T5919] gp8psk_fe: Frontend revision 1 attached [ 123.765647][ T5919] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 123.974469][ T5919] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 124.126637][ T6716] ip6tnl1: entered promiscuous mode [ 124.644997][ T5919] gp8psk: usb in 138 operation failed. [ 124.664893][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 124.714282][ T5919] gp8psk: found Genpix USB device pID = 201 (hex) [ 124.767097][ T5919] usb 1-1: USB disconnect, device number 6 [ 124.844304][ T30] audit: type=1400 audit(1757443463.876:351): avc: denied { connect } for pid=6724 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.964945][ T30] audit: type=1400 audit(1757443463.876:352): avc: denied { getopt } for pid=6724 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.039249][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 125.230739][ T923] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 125.392820][ T923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.404432][ T923] usb 3-1: config 0 has no interface number 0 [ 125.416969][ T923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.444874][ T923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.466576][ T923] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.489091][ T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.518786][ T30] audit: type=1400 audit(1757443464.546:353): avc: denied { setopt } for pid=6717 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.544774][ T923] usb 3-1: config 0 descriptor?? [ 125.576520][ T923] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 126.154391][ T6746] iowarrior 3-1:0.1: Error -90 while submitting URB [ 126.808132][ T6753] ipvlan1: entered promiscuous mode [ 127.908596][ T6770] tmpfs: Unknown parameter 'fr_ieq' [ 127.926002][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 128.030408][ T6024] usb 3-1: USB disconnect, device number 10 [ 129.540508][ T30] audit: type=1400 audit(1757443468.076:354): avc: denied { ioctl } for pid=6776 comm="syz.2.208" path="socket:[11104]" dev="sockfs" ino=11104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.874389][ T6781] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 129.894352][ T6781] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 130.021116][ T30] audit: type=1800 audit(1757443468.906:355): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.208" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 130.046983][ T30] audit: type=1400 audit(1757443468.906:356): avc: denied { firmware_load } for pid=6776 comm="syz.2.208" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 130.529004][ T6781] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.544114][ T30] audit: type=1400 audit(1757443469.556:357): avc: denied { firmware_load } for pid=6776 comm="syz.2.208" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 130.624419][ T6790] ======================================================= [ 130.624419][ T6790] WARNING: The mand mount option has been deprecated and [ 130.624419][ T6790] and is ignored by this kernel. Remove the mand [ 130.624419][ T6790] option from the mount to silence this warning. [ 130.624419][ T6790] ======================================================= [ 130.661857][ T30] audit: type=1400 audit(1757443469.656:358): avc: denied { write } for pid=6769 comm="syz.4.205" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 130.703356][ T30] audit: type=1400 audit(1757443469.656:359): avc: denied { remount } for pid=6769 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.635368][ T30] audit: type=1400 audit(1757443470.246:360): avc: denied { unlink } for pid=6793 comm="syz.1.211" name="#1" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 131.691320][ T6024] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.706022][ T30] audit: type=1400 audit(1757443470.326:361): avc: denied { create } for pid=6793 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.894723][ T6802] : Can't lookup blockdev [ 131.934552][ T30] audit: type=1400 audit(1757443470.636:362): avc: denied { connect } for pid=6793 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.956873][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 131.983081][ T6024] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 132.009864][ T6024] usb 1-1: config 0 has no interface number 0 [ 132.035196][ T6024] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.050724][ T30] audit: type=1400 audit(1757443470.806:363): avc: denied { write } for pid=6798 comm="syz.2.214" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.135521][ T6024] usb 1-1: config 0 interface 85 has no altsetting 0 [ 132.163208][ T6024] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 132.206938][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.232909][ T6024] usb 1-1: Product: syz [ 132.256629][ T6024] usb 1-1: Manufacturer: syz [ 132.301918][ T6024] usb 1-1: SerialNumber: syz [ 132.361137][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.365706][ T6024] usb 1-1: config 0 descriptor?? [ 132.386627][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.398872][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.410608][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.419005][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.576880][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.605964][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.811259][ T6024] appletouch 1-1:0.85: Failed to read mode from device. [ 132.850774][ T6024] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 133.370120][ T6816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.381426][ T6816] block device autoloading is deprecated and will be removed. [ 133.940030][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.071793][ T6832] sctp: [Deprecated]: syz.4.219 (pid 6832) Use of int in maxseg socket option. [ 134.071793][ T6832] Use struct sctp_assoc_value instead [ 134.348249][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.466395][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.589177][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 134.708029][ T5861] Bluetooth: hci5: command tx timeout [ 134.775205][ T6024] usb 1-1: USB disconnect, device number 7 [ 134.793162][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.057682][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.482260][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.489441][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.517791][ T6806] bridge_slave_0: entered allmulticast mode [ 135.527431][ T6846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.537340][ T6806] bridge_slave_0: entered promiscuous mode [ 135.580655][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 135.591323][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.665420][ T6848] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 135.694687][ T6848] bridge0: port 3(team0) entered disabled state [ 135.713372][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.776799][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 135.776811][ T30] audit: type=1400 audit(1757443474.806:373): avc: denied { create } for pid=6850 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.874745][ T6848] team0: left allmulticast mode [ 135.883870][ T6848] team_slave_0: left allmulticast mode [ 135.889427][ T6848] team_slave_1: left allmulticast mode [ 135.895291][ T6848] team0: left promiscuous mode [ 135.900086][ T6848] team_slave_0: left promiscuous mode [ 135.907654][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 135.938735][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.953673][ T30] audit: type=1400 audit(1757443474.966:374): avc: denied { create } for pid=6853 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.016029][ T30] audit: type=1400 audit(1757443474.976:375): avc: denied { bind } for pid=6853 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.107824][ T6861] Bluetooth: MGMT ver 1.23 [ 136.146468][ T6848] team_slave_1: left promiscuous mode [ 136.165983][ T6848] bridge0: port 3(team0) entered disabled state [ 136.214573][ T24] usb 3-1: config 0 descriptor?? [ 136.351868][ T6864] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 136.367817][ T6864] netlink: 2 bytes leftover after parsing attributes in process `syz.0.221'. [ 136.630080][ T6848] batman_adv: batadv0: Adding interface: team0 [ 136.668120][ T6848] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.693327][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.707030][ T24] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 136.728647][ T24] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 136.746833][ T24] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x2 [ 136.759136][ T24] konepure 0003:1E7D:2DB4.0004: item fetching failed at offset 3/4 [ 136.770547][ T6848] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 136.787157][ T24] konepure 0003:1E7D:2DB4.0004: parse failed [ 136.793836][ T24] konepure 0003:1E7D:2DB4.0004: probe with driver konepure failed with error -22 [ 136.850435][ T5861] Bluetooth: hci5: command tx timeout [ 137.170759][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.177861][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.335882][ T6806] bridge_slave_1: entered allmulticast mode [ 137.359050][ T6806] bridge_slave_1: entered promiscuous mode [ 137.401409][ T6864] team0: entered promiscuous mode [ 137.406525][ T6864] team_slave_0: entered promiscuous mode [ 137.414884][ T6864] team_slave_1: entered promiscuous mode [ 137.424593][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.434194][ T6864] batman_adv: batadv0: Interface activated: team0 [ 137.443889][ T30] audit: type=1400 audit(1757443476.456:376): avc: denied { create } for pid=6833 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 137.481089][ T6864] batman_adv: batadv0: Interface deactivated: team0 [ 137.487773][ T6864] batman_adv: batadv0: Removing interface: team0 [ 137.513581][ T6864] bridge0: port 3(team0) entered blocking state [ 137.528222][ T6864] bridge0: port 3(team0) entered disabled state [ 137.557500][ T6864] team0: entered allmulticast mode [ 137.572037][ T6864] team_slave_0: entered allmulticast mode [ 137.580061][ T6864] team_slave_1: entered allmulticast mode [ 137.590002][ T6864] bridge0: port 3(team0) entered blocking state [ 137.596383][ T6864] bridge0: port 3(team0) entered forwarding state [ 137.803874][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.906256][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.032187][ T30] audit: type=1400 audit(1757443477.066:377): avc: denied { read open } for pid=6872 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.094462][ T30] audit: type=1400 audit(1757443477.096:378): avc: denied { getattr } for pid=6872 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.709679][ T36] team0: left allmulticast mode [ 138.725163][ T5904] usb 3-1: USB disconnect, device number 11 [ 138.770665][ T36] team_slave_0: left allmulticast mode [ 138.834442][ T36] team_slave_1: left allmulticast mode [ 138.841740][ T36] bridge0: port 3(team0) entered disabled state [ 138.884530][ T5861] Bluetooth: hci5: command tx timeout [ 138.925757][ T36] bridge_slave_1: left allmulticast mode [ 138.939982][ T36] bridge_slave_1: left promiscuous mode [ 138.950489][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.127799][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 139.151558][ T36] bridge_slave_0: left allmulticast mode [ 139.157250][ T36] bridge_slave_0: left promiscuous mode [ 139.267064][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.317242][ T30] audit: type=1400 audit(1757443478.236:379): avc: denied { create } for pid=6880 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.531417][ T6897] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 139.599336][ T6898] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 139.619957][ T6898] netlink: 2 bytes leftover after parsing attributes in process `syz.0.227'. [ 139.785996][ T30] audit: type=1400 audit(1757443478.816:380): avc: denied { add_name } for pid=6868 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.962352][ T30] audit: type=1400 audit(1757443478.846:381): avc: denied { create } for pid=6868 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.302227][ T30] audit: type=1400 audit(1757443478.846:382): avc: denied { write } for pid=6868 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2934 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.608824][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.646821][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.687694][ T36] bond0 (unregistering): Released all slaves [ 140.868428][ T6897] bridge0: port 3(team0) entered disabled state [ 140.960707][ T5861] Bluetooth: hci5: command tx timeout [ 141.207879][ T6897] team0: left allmulticast mode [ 141.225036][ T6897] team_slave_0: left allmulticast mode [ 141.266863][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 141.266879][ T30] audit: type=1400 audit(1757443480.296:386): avc: denied { getopt } for pid=6917 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 141.300155][ T6897] team_slave_1: left allmulticast mode [ 141.306531][ T30] audit: type=1400 audit(1757443480.326:387): avc: denied { ioctl } for pid=6917 comm="syz.2.234" path="socket:[12495]" dev="sockfs" ino=12495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 141.355804][ T6897] team0: left promiscuous mode [ 141.366558][ T30] audit: type=1400 audit(1757443480.326:388): avc: denied { ioctl } for pid=6917 comm="syz.2.234" path="socket:[12496]" dev="sockfs" ino=12496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.402747][ T6897] team_slave_0: left promiscuous mode [ 141.511260][ T30] audit: type=1400 audit(1757443480.326:389): avc: denied { setattr } for pid=6917 comm="syz.2.234" name="QIPCRTR" dev="sockfs" ino=12499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.538424][ T6897] team_slave_1: left promiscuous mode [ 141.576760][ T6897] bridge0: port 3(team0) entered disabled state [ 142.097593][ T6897] batman_adv: batadv0: Adding interface: team0 [ 142.113347][ T6897] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.116578][ T6924] can: request_module (can-proto-0) failed. [ 142.146174][ T6897] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 142.159356][ T6898] team0: entered promiscuous mode [ 142.168307][ T6898] team_slave_0: entered promiscuous mode [ 142.174651][ T6898] team_slave_1: entered promiscuous mode [ 142.195345][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.208144][ T6898] batman_adv: batadv0: Interface activated: team0 [ 142.217073][ T6898] batman_adv: batadv0: Interface deactivated: team0 [ 142.225830][ T6898] batman_adv: batadv0: Removing interface: team0 [ 142.234816][ T6898] bridge0: port 3(team0) entered blocking state [ 142.296021][ T6898] bridge0: port 3(team0) entered disabled state [ 142.307851][ T6898] team0: entered allmulticast mode [ 142.334618][ T6898] team_slave_0: entered allmulticast mode [ 142.449566][ T6898] team_slave_1: entered allmulticast mode [ 142.461487][ T30] audit: type=1400 audit(1757443481.496:390): avc: denied { listen } for pid=6941 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.484225][ T6898] bridge0: port 3(team0) entered blocking state [ 142.490591][ T6898] bridge0: port 3(team0) entered forwarding state [ 142.610349][ T6806] team0: Port device team_slave_0 added [ 143.015406][ T6806] team0: Port device team_slave_1 added [ 143.131920][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.152039][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.183657][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.196495][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.209643][ T30] audit: type=1400 audit(1757443482.236:391): avc: denied { mounton } for pid=6944 comm="syz.1.243" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 143.239069][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.301245][ T30] audit: type=1400 audit(1757443482.306:392): avc: denied { getopt } for pid=6947 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.381820][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.392964][ T30] audit: type=1400 audit(1757443482.306:393): avc: denied { ioctl } for pid=6947 comm="syz.2.242" path="socket:[12563]" dev="sockfs" ino=12563 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.492147][ T6963] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 143.492147][ T6963] The task syz.0.245 (6963) triggered the difference, watch for misbehavior. [ 143.590559][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.658931][ T6962] sp0: Synchronizing with TNC [ 143.751525][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 143.769759][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.810310][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.835300][ T24] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 143.882292][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.914622][ T30] audit: type=1400 audit(1757443482.936:394): avc: denied { accept } for pid=6972 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 143.945323][ T24] usb 2-1: config 0 descriptor?? [ 143.987266][ T6806] hsr_slave_0: entered promiscuous mode [ 144.026453][ T6806] hsr_slave_1: entered promiscuous mode [ 144.052267][ T6806] debugfs: 'hsr0' already exists in 'hsr' [ 144.067529][ T6806] Cannot create hsr debugfs directory [ 144.183986][ T36] hsr_slave_0: left promiscuous mode [ 144.237067][ T36] hsr_slave_1: left promiscuous mode [ 144.244417][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.326475][ C1] [ 144.328830][ C1] ============================= [ 144.333660][ C1] [ BUG: Invalid wait context ] [ 144.338487][ C1] syzkaller #0 Not tainted [ 144.342892][ C1] ----------------------------- [ 144.347753][ C1] syz.0.245/6983 is trying to lock: [ 144.352951][ C1] ffff8880748ad410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 144.362441][ C1] other info that might help us debug this: [ 144.368309][ C1] context-{2:2} [ 144.371795][ C1] 5 locks held by syz.0.245/6983: [ 144.376800][ C1] #0: ffff8880792c4260 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 144.386192][ C1] #1: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x33/0x4f0 [ 144.395753][ C1] #2: ffff88803271e858 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x10f/0x310 [ 144.406377][ C1] #3: ffffffff8e5c11a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0x140/0x4d0 [ 144.415903][ C1] #4: ffff8880748ad960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 144.425813][ C1] stack backtrace: [ 144.429510][ C1] CPU: 1 UID: 0 PID: 6983 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 144.429526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.429534][ C1] Call Trace: [ 144.429539][ C1] [ 144.429543][ C1] dump_stack_lvl+0x116/0x1f0 [ 144.429562][ C1] __lock_acquire+0xa27/0x1ce0 [ 144.429580][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 144.429599][ C1] lock_acquire+0x179/0x350 [ 144.429616][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 144.429635][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 144.429650][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 144.429666][ C1] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 144.429682][ C1] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 144.429700][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 144.429717][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 144.429730][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.429742][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 144.429756][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 144.429777][ C1] xen_timer_callback+0x1db/0x2a0 [ 144.429793][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 144.429811][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 144.429824][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 144.429840][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 144.429853][ C1] ? read_tsc+0x9/0x20 [ 144.429871][ C1] hrtimer_interrupt+0x397/0x8e0 [ 144.429888][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 144.429902][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 144.429916][ C1] [ 144.429920][ C1] [ 144.429924][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.429938][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 144.429955][ C1] Code: e6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 a2 13 0f 0f 82 74 02 00 00 8b 35 da d3 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 e6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 144.429967][ C1] RSP: 0018:ffffc9000bbd71a8 EFLAGS: 00000206 [ 144.429977][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c11a0 RCX: 0000000090a31473 [ 144.429985][ C1] RDX: 0000000000000000 RSI: ffffffff8de2cdc0 RDI: ffffffff8c162d80 [ 144.429992][ C1] RBP: 0000000000000002 R08: f69d9b0ed8cdb25f R09: 0000000000000000 [ 144.429999][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 144.430006][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.430019][ C1] ? find_held_lock+0x2b/0x80 [ 144.430034][ C1] pfn_valid+0x15c/0x4d0 [ 144.430045][ C1] ? pfn_valid+0x140/0x4d0 [ 144.430056][ C1] page_table_check_clear+0x21/0x740 [ 144.430067][ C1] ? folio_mark_accessed+0xc1/0xc00 [ 144.430082][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 144.430095][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 144.430107][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 144.430127][ C1] unmap_page_range+0x1e6d/0x42c0 [ 144.430149][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 144.430163][ C1] ? find_held_lock+0x2b/0x80 [ 144.430177][ C1] ? uprobe_munmap+0x20/0x5c0 [ 144.430192][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 144.430209][ C1] unmap_vmas+0x218/0x470 [ 144.430223][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 144.430236][ C1] ? mtree_range_walk+0x718/0xc00 [ 144.430253][ C1] ? mas_next+0x9b/0xf0 [ 144.430267][ C1] ? find_held_lock+0x2b/0x80 [ 144.430281][ C1] vms_clear_ptes+0x41f/0x770 [ 144.430301][ C1] ? __pfx_vms_clear_ptes+0x10/0x10 [ 144.430321][ C1] ? may_expand_vm+0xe8/0x430 [ 144.430337][ C1] __mmap_region+0x5e1/0x27b0 [ 144.430349][ C1] ? lock_acquire+0x179/0x350 [ 144.430365][ C1] ? __pfx___mmap_region+0x10/0x10 [ 144.430379][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.430392][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 144.430408][ C1] ? rcu_is_watching+0x12/0xc0 [ 144.430423][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 144.430436][ C1] ? __schedule+0x11a3/0x5de0 [ 144.430453][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 144.430479][ C1] ? mm_get_unmapped_area+0x95/0xe0 [ 144.430495][ C1] mmap_region+0x1ab/0x3f0 [ 144.430506][ C1] ? __get_unmapped_area+0x267/0x440 [ 144.430521][ C1] do_mmap+0xa3e/0x1210 [ 144.430536][ C1] ? __pfx_do_mmap+0x10/0x10 [ 144.430550][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 144.430568][ C1] vm_mmap_pgoff+0x29e/0x470 [ 144.430584][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 144.430599][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 144.430612][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 144.430626][ C1] ? syscall_trace_enter+0x1cb/0x240 [ 144.430640][ C1] __x64_sys_mmap+0x125/0x190 [ 144.430652][ C1] do_syscall_64+0xcd/0x4c0 [ 144.430667][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.430679][ C1] RIP: 0033:0x7f350e78ebe9 [ 144.430689][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.430699][ C1] RSP: 002b:00007f350f673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.430710][ C1] RAX: ffffffffffffffda RBX: 00007f350e9c6270 RCX: 00007f350e78ebe9 [ 144.430718][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 144.430725][ C1] RBP: 00007f350e811e19 R08: ffffffffffffffff R09: 0000000000000000 [ 144.430732][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 144.430739][ C1] R13: 00007f350e9c6308 R14: 00007f350e9c6270 R15: 00007ffda71f3498 [ 144.430751][ C1] [ 144.954003][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.961016][ T24] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 144.970055][ T24] bigben 0003:146B:0902.0005: item fetching failed at offset 3/5 [ 144.978209][ T24] bigben 0003:146B:0902.0005: parse failed [ 144.984457][ T24] bigben 0003:146B:0902.0005: probe with driver bigben failed with error -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.861029][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.868434][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.099964][ T36] veth1_macvtap: left promiscuous mode [ 146.110717][ T36] veth0_macvtap: left promiscuous mode [ 146.116277][ T36] veth1_vlan: left promiscuous mode [ 146.150575][ T36] veth0_vlan: left promiscuous mode [ 146.390416][ T36] team_slave_1 (unregistering): left promiscuous mode [ 146.401226][ T36] team0 (unregistering): Port device team_slave_1 removed [ 146.418484][ T36] team_slave_0 (unregistering): left promiscuous mode [ 146.425831][ T36] team0 (unregistering): Port device team_slave_0 removed [ 146.916607][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.977719][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.041528][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.094404][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.157263][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.204679][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.244079][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.302878][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.381687][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.446220][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.496342][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.564875][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.632126][ T36] bridge_slave_1: left allmulticast mode [ 147.637793][ T36] bridge_slave_1: left promiscuous mode [ 147.646604][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.655442][ T36] bridge_slave_0: left allmulticast mode [ 147.662846][ T36] bridge_slave_0: left promiscuous mode [ 147.668547][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.677609][ T36] team0: left allmulticast mode [ 147.685805][ T36] team_slave_0: left allmulticast mode [ 147.695170][ T36] team_slave_1: left allmulticast mode [ 147.701269][ T36] bridge0: port 3(team0) entered disabled state [ 147.708596][ T36] bridge_slave_1: left allmulticast mode [ 147.714580][ T36] bridge_slave_1: left promiscuous mode [ 147.720252][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.729944][ T36] bridge_slave_0: left allmulticast mode [ 147.735863][ T36] bridge_slave_0: left promiscuous mode [ 147.743356][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.757536][ T36] team0: left allmulticast mode [ 147.763692][ T36] team_slave_0: left allmulticast mode [ 147.769207][ T36] team_slave_1: left allmulticast mode [ 147.776591][ T36] bridge0: port 3(team0) entered disabled state [ 147.785017][ T36] bridge_slave_1: left allmulticast mode [ 147.792335][ T36] bridge_slave_1: left promiscuous mode [ 147.798002][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.807320][ T36] bridge_slave_0: left allmulticast mode [ 147.815135][ T36] bridge_slave_0: left promiscuous mode [ 147.820908][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.829123][ T36] team0: left allmulticast mode [ 147.834286][ T36] team_slave_0: left allmulticast mode [ 147.839733][ T36] team_slave_1: left allmulticast mode [ 147.845501][ T36] bridge0: port 3(team0) entered disabled state [ 147.853089][ T36] bridge_slave_1: left allmulticast mode [ 147.858732][ T36] bridge_slave_1: left promiscuous mode [ 147.864667][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.873050][ T36] bridge_slave_0: left allmulticast mode [ 147.878669][ T36] bridge_slave_0: left promiscuous mode [ 147.884514][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.042723][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.052120][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.061942][ T36] bond0 (unregistering): Released all slaves [ 148.107266][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.116811][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.127078][ T36] bond0 (unregistering): Released all slaves [ 148.198289][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.207864][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.218487][ T36] bond0 (unregistering): Released all slaves [ 148.273330][ T36] bond1 (unregistering): Released all slaves [ 148.324194][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.333569][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.344439][ T36] bond0 (unregistering): Released all slaves [ 148.804787][ T36] hsr_slave_0: left promiscuous mode [ 148.812460][ T36] hsr_slave_1: left promiscuous mode [ 148.818371][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.826655][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.839262][ T36] hsr_slave_0: left promiscuous mode [ 148.848130][ T36] hsr_slave_1: left promiscuous mode [ 148.855087][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.862537][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.870088][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.877740][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.887277][ T36] hsr_slave_0: left promiscuous mode [ 148.894229][ T36] hsr_slave_1: left promiscuous mode [ 148.899948][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.910036][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.918666][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.927940][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.938275][ T36] hsr_slave_0: left promiscuous mode [ 148.945290][ T36] hsr_slave_1: left promiscuous mode [ 148.952400][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.959779][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.968930][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.978037][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.994429][ T36] veth1_macvtap: left promiscuous mode [ 148.999928][ T36] veth0_macvtap: left promiscuous mode [ 149.006062][ T36] veth1_vlan: left promiscuous mode [ 149.014266][ T36] veth0_vlan: left promiscuous mode [ 149.019916][ T36] veth1_macvtap: left promiscuous mode [ 149.025496][ T36] veth0_macvtap: left promiscuous mode [ 149.031072][ T36] veth1_vlan: left promiscuous mode [ 149.036307][ T36] veth0_vlan: left promiscuous mode [ 149.042264][ T36] veth1_macvtap: left promiscuous mode [ 149.047738][ T36] veth0_macvtap: left promiscuous mode [ 149.053291][ T36] veth1_vlan: left promiscuous mode [ 149.058507][ T36] veth0_vlan: left promiscuous mode [ 149.138399][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.149476][ T36] team0 (unregistering): Port device team_slave_0 removed [ 149.248244][ T36] team_slave_1 (unregistering): left promiscuous mode [ 149.255720][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.274058][ T36] team_slave_0 (unregistering): left promiscuous mode [ 149.281331][ T36] team0 (unregistering): Port device team_slave_0 removed [ 149.419087][ T36] team_slave_1 (unregistering): left promiscuous mode [ 149.428383][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.446196][ T36] team_slave_0 (unregistering): left promiscuous mode [ 149.453357][ T36] team0 (unregistering): Port device team_slave_0 removed [ 149.594995][ T36] team_slave_1 (unregistering): left promiscuous mode [ 149.603061][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.619750][ T36] team_slave_0 (unregistering): left promiscuous mode [ 149.628120][ T36] team0 (unregistering): Port device team_slave_0 removed [ 150.446461][ T36] IPVS: stop unused estimator thread 0...