last executing test programs: 2m29.576184637s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 2m7.221670869s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 1m35.911977539s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 1m5.531974119s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 41.276419905s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 18.055640462s ago: executing program 0 (id=223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="305c0607e182ef6f51667457c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acf786485bd0461690982b236949ab5e000000808ce41d86b9d049004fd8fe45b91e8fe7ec7c49750a1b", 0x4c, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) 10.852961011s ago: executing program 2 (id=674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f80)=ANY=[], 0x261c}, 0x1, 0x0, 0x0, 0x488c4}, 0x20008800) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff000000007110630000000000950002000000000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x8880) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="5b242812"}, {&(0x7f0000000200)="f2d9152b05d9a31b102f7bc7a907d009158f9e87fae2645bb3aaf75b3419328dfac294743300a3ee2fba702fc032bf49de16591f4b56b53bba2a1236886f69fcf9b1f7cfa57bb91d53aed289136a83c45383fde05a"}, {&(0x7f0000000180)}, {&(0x7f0000000280)="ccb7d076e32de7b8b05166716f8d426035e6a26b663a7dcbef571287824fcca0dad528b65cebac2af0069932e27551d6bf6d53be60d5b6d407a06c9e878551d2ac66c3e6810dfb582577ac85823dfa7b5e398bd75771b209bbd4671b37d290d481caa9e106c24b7974fdfdc18b5d659884057a3b029f091187ccce94b5"}, {&(0x7f0000000380)="1f22e1f05c8798b33676aad99a8c9b6bb50f9bb71a69818c36372bcc6ee7640e123c46f940cc188d0b83dc49ff90f89fe27bb4d21bf1444ae6ca4e75d82746c4d43a89e5c7"}], 0x13) sendmsg$alg(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000700)=""/160, 0xa0}], 0x1}, 0x2) 10.837627623s ago: executing program 4 (id=675): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth1_vlan\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000002440), 0x80, 0x0) 10.631438586s ago: executing program 2 (id=676): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x11b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000088a40005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r8, 0x0) listen(r8, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, [], [0x0, 0x0, 0x4], [0x0, 0x0, 0x1]}) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) socket$unix(0x1, 0x1, 0x0) 10.522669383s ago: executing program 4 (id=678): recvmmsg(0xffffffffffffffff, &(0x7f00000073c0)=[{{&(0x7f0000004d40)=@x25, 0x80, 0x0}, 0x1}, {{&(0x7f0000006140)=@phonet, 0x80, 0x0}, 0x5}], 0x2, 0x40010021, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r2}) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4004051}], 0x49249249249253c, 0x0) 9.658316971s ago: executing program 2 (id=680): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x131801, 0x140) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r3, 0x1}, 0x18) r5 = epoll_create(0x10000e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r10 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r11 = ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000100)={r10, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r11, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x2002, 0x100) write$cgroup_int(r12, &(0x7f0000000000), 0x12) sendmmsg$sock(r2, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000e40)='??', 0x2}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x0, 0x5e, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 7.345012994s ago: executing program 3 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x0, 0x40010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x5, 0x0) dup3(r5, r4, 0x0) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r8 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x800000, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) getpeername$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x6) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYRESOCT]) sendfile(0xffffffffffffffff, r6, &(0x7f00000001c0), 0x8) open(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 6.642772041s ago: executing program 4 (id=689): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x10000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="e10100000000000000000000030000008500ff000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) r8 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r8, 0xc0385720, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380), 0x0) getuid() ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0x7f}) syz_open_dev$video4linux(&(0x7f0000000040), 0x2000000000005, 0x109000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x40047435, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) 6.406703879s ago: executing program 2 (id=690): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x0, 0x40001032, r0, 0x0) r2 = fanotify_init(0x4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x401, 0x1, 0x3ff, 0x8c4c, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x4, @value, @void, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) iopl(0x3) syslog(0x4, 0x0, 0x0) fanotify_mark(r2, 0x101, 0x20, r5, 0x0) 6.406305879s ago: executing program 1 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x2100, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x3f, 0x0}}], 0x62, 0x7ffffff7) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0xffffffffffffffc6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.184677512s ago: executing program 3 (id=692): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="1911e34d24f22ea42788043f467c94259030cd220157f59a28426536a228ee50a7364d14425f2c2785aa2e29e5902141c9b89c9c0ae9d26793f34f4217158808a36bfd1a19", 0x45}, {&(0x7f0000000300)="3c914ea8b8e7afb7ed067ed03e20f9d439ae54c891fa4ab8654fe8e32d5b95eea5994e4ac59c826e010000000000000012f4d9ed2f3f380c1766b9d3", 0x3c}], 0x2}}], 0x1, 0x24000000) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/133, 0x85}], 0x2}, 0x2) 4.008016366s ago: executing program 4 (id=693): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0x4}}, 0x18) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000020c0)={{r0}, "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"}) r4 = socket$rxrpc(0x21, 0x2, 0x2) listen(r4, 0xfff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000030c0), 0x480, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000003100)=0x0, &(0x7f0000003140)=0x4) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003180)={{{@in=@remote, @in=@multicast1, 0x4e23, 0x0, 0x4e20, 0xffff, 0xa, 0x20, 0x20, 0x6c, r5, r2}, {0xc, 0x7ff, 0x3, 0x0, 0x2, 0xffffffffffffff01, 0x7993}, {0x7, 0x9, 0xffffffffb17a8786, 0x4}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0xcc}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x2, 0x2, 0x69, 0xb, 0xd6, 0x1}}, 0xe8) pselect6(0x40, &(0x7f0000003280)={0x8000, 0x1, 0x3, 0x9, 0x7fffffffffffffff, 0x996}, &(0x7f00000032c0)={0x401, 0x9, 0x4, 0x9, 0x5, 0x9, 0x1}, &(0x7f0000003300)={0x8, 0x80, 0x4, 0xc902, 0x3, 0x7f, 0x6c4, 0x6}, &(0x7f0000003340)={0x0, 0x3938700}, &(0x7f00000033c0)={&(0x7f0000003380)={[0xc4]}, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003400)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000003700)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003480)=@newqdisc={0x240, 0x24, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0xffe0}, {0x7, 0x9}, {0xc, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x1, 0x2}}}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x58, 0x6, 0x9, 0x1, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x7, 0x6, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x6, 0x9, 0x2c6b, 0x8, 0x7fa5]}}, {{0x1c, 0x1, {0x3, 0x7f, 0x0, 0x2, 0x2, 0x101, 0x2, 0x3}}, {0xa, 0x2, [0x8, 0x80f, 0x5f9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x9, 0x0, 0x800, 0x0, 0x6}}, {0x10, 0x2, [0x7, 0x21cc, 0xfffb, 0x100, 0xdaad, 0x8]}}, {{0x1c, 0x1, {0xf9, 0x80, 0xc2, 0x2, 0x1, 0x800, 0x7, 0x7}}, {0x12, 0x2, [0xaf6, 0x40, 0xd8f8, 0x0, 0x541, 0x0, 0x4]}}, {{0x1c, 0x1, {0x5, 0x7, 0x0, 0xb4, 0x1, 0x4, 0x6, 0xa}}, {0x18, 0x2, [0x5f1, 0x2c00, 0xae, 0x7, 0x5, 0x8, 0x1, 0xfffa, 0x4, 0xb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x0, 0x5, 0x9, 0x0, 0xfffffffb, 0x9, 0x2}}, {0x8, 0x2, [0x7ff, 0xace]}}, {{0x1c, 0x1, {0x8, 0x7e, 0xf4dd, 0x5, 0x2, 0xfffff2d1, 0xfffffff7, 0x2}}, {0x8, 0x2, [0xf000, 0x100]}}, {{0x1c, 0x1, {0x3, 0x4, 0x2, 0x0, 0x2, 0x8, 0x5, 0x5}}, {0xe, 0x2, [0x2, 0x7, 0x3, 0x9fe, 0xfff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x240}, 0x1, 0x0, 0x0, 0x804}, 0x20040842) clock_gettime(0x0, &(0x7f0000003740)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000003780)={r7, r8/1000+10000}, 0x10) prlimit64(r3, 0x2, &(0x7f00000037c0)={0x5, 0x1de}, &(0x7f0000003800)) getrlimit(0xd, &(0x7f0000003840)) r9 = io_uring_setup(0x1394, &(0x7f0000003880)={0x0, 0xb5c, 0x2052, 0x1, 0x157, 0x0, r0}) r10 = syz_io_uring_setup(0x5d5a, &(0x7f0000003900)={0x0, 0x4271, 0x4, 0x1, 0xa2, 0x0, r9}, &(0x7f0000003980), &(0x7f00000039c0)) pidfd_send_signal(r0, 0x41, &(0x7f0000003a00)={0x1b, 0x3, 0x5}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) getpeername$packet(r0, &(0x7f0000003b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003b40)=0x14) sendto$packet(r0, &(0x7f0000003a80)="1c8c63c7ddce8ea43359aa3f9f54863235c5bba1c13d3a2525926926b3a45e1a3b37d6cea2ae684eda227800dfd0517b31b59b2f9a9131a7794bacd7e74e8557019a8186668dd17f70b9350239", 0x4d, 0xc00c0, &(0x7f0000003b80)={0x11, 0xd, r11, 0x1, 0x8, 0x6, @broadcast}, 0x14) prlimit64(r3, 0x1, &(0x7f0000003bc0)={0x1, 0xee}, &(0x7f0000003c00)) chmod(&(0x7f0000003c40)='./file0\x00', 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000003c80)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) socket$netlink(0x10, 0x3, 0x13) getsockopt$llc_int(r12, 0x10c, 0x9, &(0x7f0000003cc0), &(0x7f0000003d00)=0x4) getsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000003dc0)) syncfs(r6) 3.298564744s ago: executing program 3 (id=694): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$fb0(0xffffffffffffff9c, 0x0, 0x22002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$drirender128(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000080)={0x0, r3}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8003}, 0x10) sendto$inet(r5, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) 3.298291976s ago: executing program 1 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) (async, rerun: 32) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) fcntl$setsig(r2, 0xa, 0x21) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000001c0)=0x32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.246283925s ago: executing program 4 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r2, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x84) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) socket$key(0xf, 0x3, 0x2) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) mq_timedsend(r1, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d988246636ae1e5ce8f", 0x65, 0x9, 0x0) close(r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 3.198025504s ago: executing program 2 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001003300000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.658465877s ago: executing program 1 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r4}, 0x10) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f00000001c0)={0x3, 0x1, 0x6, 0x5, 0x80000000, 0xf475, 0x5, 0x3, 0x5b74, 0x4, 0x1, 0x1, 0xfffffff9, 0x64}) r5 = eventfd(0x2) r6 = syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x1e22, 0x80, 0x6, 0x358}, &(0x7f00000003c0), &(0x7f00000002c0)) dup3(r6, r5, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x1e, &(0x7f0000000180), 0x1) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f00000000c0)=0xfffffff8, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 2.65754257s ago: executing program 3 (id=699): recvmmsg(0xffffffffffffffff, &(0x7f00000073c0)=[{{&(0x7f0000004d40)=@x25, 0x80, 0x0}, 0x1}, {{&(0x7f0000006140)=@phonet, 0x80, 0x0}, 0x5}], 0x2, 0x40010021, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r2}) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4004051}], 0x49249249249253c, 0x0) 1.557458947s ago: executing program 1 (id=700): pipe(&(0x7f0000000080)) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000100000091dc00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 1.525564446s ago: executing program 4 (id=701): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='j', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) syz_usb_disconnect(r0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1}, 0x18) epoll_create(0x10000e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpeername$packet(r5, &(0x7f00000000c0), &(0x7f0000000180)=0x14) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f000019b000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x4010, r3, 0x6bc55000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x4004090) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 986.474769ms ago: executing program 2 (id=702): membarrier(0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000140)=0x8, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c1}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000049233300003cf4435522050000000000010902240001000000000904000001030000000921000000012205000905810300000000cf02fcc827bdad9e76cd0a30031d0b6469ec88aa85a5d83927745b63930f7aa8ab45385c805620805e44731b"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x40, 0x0, 0x6, {0x6, 0x0, "17e10800"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 265.694086ms ago: executing program 3 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_hwaddr=@remote}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000080)=0x80000001, 0x4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc000) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, 0x0, 0x200, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="000088a8450000000000000190780a010100ac1414fde8141978000000004500000000000000002f0000ac141412dfcc58671414bb0000000000000000"], 0x34) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x4, 0x4, 0x2, 0x1, 0x10000013, 0xfffffffa, 0x1}, 0x1c) (async) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) (async) bpf$PROG_LOAD(0x5, 0x0, 0xc708daf90263817c) (async) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x2, 0x7fff}, 0x0) 157.575546ms ago: executing program 1 (id=704): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="1911e34d24f22ea42788043f467c94259030cd220157f59a28426536a228ee50a7364d14425f2c2785aa2e29e5902141c9b89c9c0ae9d26793f34f4217158808a36bfd1a19", 0x45}, {&(0x7f0000000300)="3c914ea8b8e7afb7ed067ed03e20f9d439ae54c891fa4ab8654fe8e32d5b95eea5994e4ac59c826e010000000000000012f4d9ed2f3f380c1766b9d3", 0x3c}], 0x2}}], 0x1, 0x24000000) recvmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/133, 0x85}], 0x2}, 0x2) 42.754779ms ago: executing program 1 (id=705): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0xe, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x8000000000002}) 0s ago: executing program 3 (id=706): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4], [0x0, 0x4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}], '\x00', 0x1268000, 0x0, 0x0, 0x5000000, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x48800) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 438 comm="syz.2.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.277556][ T7461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.531020][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 201.677606][ T25] usb 3-1: device descriptor read/64, error -71 [ 202.080206][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.680423][ T5826] Bluetooth: hci2: command tx timeout [ 202.746995][ T25] usb 3-1: device descriptor read/64, error -71 [ 202.866832][ T25] usb usb3-port1: attempt power cycle [ 203.170483][ C1] net_ratelimit: 3 callbacks suppressed [ 203.170499][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.217076][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.261594][ T25] usb 3-1: device descriptor read/8, error -71 [ 203.899297][ T7487] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.370'. [ 204.216530][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.227219][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.259811][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 204.269949][ T25] usb 3-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config [ 204.335505][ T25] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 204.361697][ T25] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 204.372951][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.383089][ T25] usb 3-1: Product: syz [ 204.388600][ T25] usb 3-1: Manufacturer: syz [ 204.393285][ T25] usb 3-1: SerialNumber: syz [ 204.393384][ T7391] chnl_net:caif_netlink_parms(): no params data found [ 204.631966][ T29] audit: type=1400 audit(1730177624.903:416): avc: denied { mount } for pid=7497 comm="syz.4.373" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 204.686696][ T5826] Bluetooth: hci2: command tx timeout [ 204.690939][ T1124] bridge_slave_1: left allmulticast mode [ 204.712400][ T29] audit: type=1400 audit(1730177624.923:417): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 204.735145][ T1124] bridge_slave_1: left promiscuous mode [ 204.757507][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.828721][ T1124] bridge_slave_0: left allmulticast mode [ 204.839113][ T1124] bridge_slave_0: left promiscuous mode [ 204.846426][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.985291][ T29] audit: type=1400 audit(1730177625.203:418): avc: denied { create } for pid=7500 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.246697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.872713][ T7515] FAULT_INJECTION: forcing a failure. [ 205.872713][ T7515] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 205.886703][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.1.375 Not tainted 6.12.0-rc5-syzkaller #0 [ 205.895574][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.905632][ T7515] Call Trace: [ 205.908916][ T7515] [ 205.911886][ T7515] dump_stack_lvl+0x16c/0x1f0 [ 205.916706][ T7515] should_fail_ex+0x497/0x5b0 [ 205.921397][ T7515] ? fs_reclaim_acquire+0xae/0x150 [ 205.926528][ T7515] should_fail_alloc_page+0xe7/0x130 [ 205.931826][ T7515] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 205.938074][ T7515] __alloc_pages_noprof+0x190/0x25a0 [ 205.943472][ T7515] ? hlock_class+0x4e/0x130 [ 205.947994][ T7515] ? __lock_acquire+0x163e/0x3ce0 [ 205.953039][ T7515] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 205.958770][ T7515] ? __pfx___lock_acquire+0x10/0x10 [ 205.963980][ T7515] ? lock_acquire.part.0+0x11b/0x380 [ 205.969268][ T7515] ? find_held_lock+0x2d/0x110 [ 205.974039][ T7515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.979947][ T7515] ? policy_nodemask+0xea/0x4e0 [ 205.984808][ T7515] alloc_pages_mpol_noprof+0x2c9/0x610 [ 205.990281][ T7515] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 205.996269][ T7515] ? do_raw_spin_unlock+0x172/0x230 [ 206.001479][ T7515] ? _raw_spin_unlock+0x28/0x50 [ 206.006341][ T7515] ? swap_swapcount+0x13c/0x220 [ 206.011202][ T7515] ? __pfx_swap_swapcount+0x10/0x10 [ 206.016417][ T7515] folio_alloc_mpol_noprof+0x36/0xd0 [ 206.021714][ T7515] __read_swap_cache_async+0x50a/0x660 [ 206.027185][ T7515] ? __pfx___read_swap_cache_async+0x10/0x10 [ 206.033173][ T7515] ? swp_swap_info+0xcf/0x130 [ 206.037860][ T7515] ? __pfx_swp_swap_info+0x10/0x10 [ 206.042979][ T7515] ? mark_lock+0xb5/0xc60 [ 206.047313][ T7515] ? __pfx___lock_acquire+0x10/0x10 [ 206.052517][ T7515] swap_cluster_readahead+0x4a9/0x6e0 [ 206.057900][ T7515] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 206.063800][ T7515] ? shmem_swapin_folio+0x839/0x1b80 [ 206.069100][ T7515] ? __pfx_lock_release+0x10/0x10 [ 206.074134][ T7515] ? mark_held_locks+0x9f/0xe0 [ 206.078916][ T7515] ? xas_nomem+0x189/0x2c0 [ 206.083349][ T7515] shmem_swapin_folio+0x1514/0x1b80 [ 206.088582][ T7515] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 206.094157][ T7515] shmem_get_folio_gfp+0x2c7/0x1530 [ 206.099372][ T7515] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 206.105011][ T7515] ? mark_lock+0xb5/0xc60 [ 206.109351][ T7515] shmem_fault+0x200/0xae0 [ 206.113784][ T7515] ? __pfx_shmem_fault+0x10/0x10 [ 206.118725][ T7515] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 206.124361][ T7515] ? rcu_is_watching+0x12/0xc0 [ 206.129138][ T7515] ? trace_lock_acquire+0x14a/0x1d0 [ 206.134362][ T7515] ? __pte_offset_map+0x42/0x540 [ 206.139320][ T7515] ? lock_acquire+0x2f/0xb0 [ 206.143834][ T7515] ? __pte_offset_map+0x42/0x540 [ 206.148797][ T7515] ? __pfx_filemap_map_pages+0x10/0x10 [ 206.154265][ T7515] __do_fault+0x10a/0x490 [ 206.158609][ T7515] ? __pfx_filemap_map_pages+0x10/0x10 [ 206.164075][ T7515] do_pte_missing+0x1a8/0x3e50 [ 206.168861][ T7515] ? __handle_mm_fault+0xce/0x2a10 [ 206.173988][ T7515] __handle_mm_fault+0x100a/0x2a10 [ 206.179130][ T7515] ? __pfx_mt_find+0x10/0x10 [ 206.183719][ T7515] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 206.189354][ T7515] ? __pfx___handle_mm_fault+0x10/0x10 [ 206.194832][ T7515] ? find_vma+0xc0/0x140 [ 206.199086][ T7515] ? __pfx_find_vma+0x10/0x10 [ 206.203779][ T7515] handle_mm_fault+0x3fa/0xaa0 [ 206.208571][ T7515] do_user_addr_fault+0x7a3/0x13f0 [ 206.213710][ T7515] exc_page_fault+0x5c/0xc0 [ 206.218235][ T7515] asm_exc_page_fault+0x26/0x30 [ 206.223104][ T7515] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 206.228933][ T7515] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 206.248556][ T7515] RSP: 0018:ffffc90004ddfa08 EFLAGS: 00050202 [ 206.254632][ T7515] RAX: 0000000000000001 RBX: 0000000000000e8f RCX: 0000000000000e8f [ 206.262600][ T7515] RDX: ffffed1006ba4dd2 RSI: ffff888035d26000 RDI: 0000000020000640 [ 206.270562][ T7515] RBP: 0000000000000e8f R08: 0000000000000000 R09: ffffed1006ba4dd1 [ 206.278528][ T7515] R10: ffff888035d26e8e R11: 0000000000000000 R12: 0000000000000000 [ 206.286496][ T7515] R13: ffffc90004ddfc18 R14: ffff888035d26000 R15: 0000000020000640 [ 206.294470][ T7515] _copy_to_iter+0x4f1/0x1560 [ 206.297096][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.299144][ T7515] ? __pfx__copy_to_iter+0x10/0x10 [ 206.311194][ T7515] ? __virt_addr_valid+0x1a4/0x590 [ 206.316306][ T7515] ? __virt_addr_valid+0x5e/0x590 [ 206.321320][ T7515] ? __phys_addr_symbol+0x30/0x80 [ 206.326335][ T7515] ? __check_object_size+0x488/0x710 [ 206.331617][ T7515] seq_read_iter+0xd00/0x12b0 [ 206.336302][ T7515] seq_read+0x39f/0x4e0 [ 206.340452][ T7515] ? __pfx_seq_read+0x10/0x10 [ 206.345136][ T7515] ? inode_security+0x72/0x130 [ 206.349905][ T7515] ? inode_security+0x101/0x130 [ 206.354747][ T7515] ? avc_policy_seqno+0x9/0x20 [ 206.359514][ T7515] ? __pfx_seq_read+0x10/0x10 [ 206.364182][ T7515] vfs_read+0x1df/0xbe0 [ 206.368339][ T7515] ? __fget_files+0x23a/0x3f0 [ 206.373016][ T7515] ? fdget_pos+0x24c/0x360 [ 206.377425][ T7515] ? __pfx_lock_release+0x10/0x10 [ 206.382445][ T7515] ? trace_lock_acquire+0x14a/0x1d0 [ 206.387639][ T7515] ? __pfx_vfs_read+0x10/0x10 [ 206.392314][ T7515] ? __pfx___mutex_lock+0x10/0x10 [ 206.397349][ T7515] ? __fget_files+0x244/0x3f0 [ 206.402027][ T7515] ksys_read+0x12f/0x260 [ 206.406284][ T7515] ? __pfx_ksys_read+0x10/0x10 [ 206.411062][ T7515] do_syscall_64+0xcd/0x250 [ 206.415585][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.421482][ T7515] RIP: 0033:0x7fe0ac97e719 [ 206.425892][ T7515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.445500][ T7515] RSP: 002b:00007fe0ad7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.453917][ T7515] RAX: ffffffffffffffda RBX: 00007fe0acb36130 RCX: 00007fe0ac97e719 [ 206.461884][ T7515] RDX: 0000000000002020 RSI: 0000000020000640 RDI: 0000000000000007 [ 206.469847][ T7515] RBP: 00007fe0ad7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 206.477842][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.485853][ T7515] R13: 0000000000000000 R14: 00007fe0acb36130 R15: 00007ffdc96fdfe8 [ 206.493833][ T7515] [ 207.326524][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.341188][ T25] usb 3-1: USB disconnect, device number 14 [ 207.366037][ T29] audit: type=1400 audit(1730177627.403:419): avc: denied { bind } for pid=7516 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.383118][ T5826] Bluetooth: hci2: command tx timeout [ 207.547152][ T29] audit: type=1400 audit(1730177627.723:420): avc: denied { write } for pid=7516 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.036944][ T7534] binder: BINDER_SET_CONTEXT_MGR already set [ 208.043042][ T7534] binder: 7532:7534 ioctl 4018620d 200001c0 returned -16 [ 208.371213][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.668275][ T29] audit: type=1400 audit(1730177628.953:421): avc: denied { nlmsg_tty_audit } for pid=7539 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 209.243518][ T5953] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.356436][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.380067][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.413291][ T5953] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 209.417036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.424041][ T1124] bond0 (unregistering): Released all slaves [ 209.445613][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.453962][ T5953] usb 5-1: Product: syz [ 209.474183][ T5953] usb 5-1: Manufacturer: syz [ 209.488237][ T5953] usb 5-1: SerialNumber: syz [ 209.508351][ T5953] usb 5-1: config 0 descriptor?? [ 209.539967][ T5953] pwc: Logitech/Cisco VT Camera webcam detected. [ 209.633476][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.651907][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.666274][ T7391] bridge_slave_0: entered allmulticast mode [ 209.681711][ T7391] bridge_slave_0: entered promiscuous mode [ 209.753638][ T5953] pwc: Failed to set LED on/off time (-71) [ 209.776987][ T5953] pwc: send_video_command error -71 [ 209.802542][ T5953] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 209.830678][ T5953] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 209.847699][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.868100][ T5953] usb 5-1: USB disconnect, device number 15 [ 209.882226][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.903738][ T7391] bridge_slave_1: entered allmulticast mode [ 210.446944][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.965758][ T7391] bridge_slave_1: entered promiscuous mode [ 211.496610][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.273489][ T7556] pimreg: entered allmulticast mode [ 212.536645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.603563][ T29] audit: type=1400 audit(1730177632.883:422): avc: denied { accept } for pid=7564 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.674004][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.685753][ T29] audit: type=1400 audit(1730177632.913:423): avc: denied { shutdown } for pid=7564 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.785172][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.566528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.738316][ T1124] hsr_slave_0: left promiscuous mode [ 213.917868][ T1124] hsr_slave_1: left promiscuous mode [ 213.976791][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.039863][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.444398][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.558655][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.591740][ T1124] veth1_macvtap: left promiscuous mode [ 214.598734][ T1124] veth0_macvtap: left promiscuous mode [ 214.604337][ T1124] veth1_vlan: left promiscuous mode [ 214.609824][ T1124] veth0_vlan: left promiscuous mode [ 214.616543][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.176611][ T1220] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 215.366950][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 215.399243][ T1220] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 215.414283][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.471240][ T1220] usb 3-1: Product: syz [ 215.481988][ T1220] usb 3-1: Manufacturer: syz [ 215.489916][ T1220] usb 3-1: SerialNumber: syz [ 215.508140][ T1220] usb 3-1: config 0 descriptor?? [ 215.519065][ T1220] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 215.646557][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.998176][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.061035][ T29] audit: type=1400 audit(1730177636.343:424): avc: denied { map } for pid=7603 comm="syz.4.398" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.101972][ T29] audit: type=1400 audit(1730177636.343:425): avc: denied { execute } for pid=7603 comm="syz.4.398" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.148123][ T29] audit: type=1400 audit(1730177636.373:426): avc: denied { listen } for pid=7603 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.172927][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 216.203931][ T29] audit: type=1400 audit(1730177636.383:427): avc: denied { ioctl } for pid=7603 comm="syz.4.398" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.254597][ T25] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 216.265330][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.289475][ T25] usb 4-1: Product: syz [ 216.317858][ T25] usb 4-1: Manufacturer: syz [ 216.322494][ T25] usb 4-1: SerialNumber: syz [ 216.363315][ T25] usb 4-1: config 0 descriptor?? [ 216.364023][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 216.541836][ T6710] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.688522][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.719678][ T6710] usb 5-1: Using ep0 maxpacket: 8 [ 216.725752][ T6710] usb 5-1: no configurations [ 216.732458][ T6710] usb 5-1: can't read configurations, error -22 [ 216.879267][ T6710] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.995421][ T25] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 217.015391][ T25] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 217.033912][ T25] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 217.043231][ T6710] usb 5-1: Using ep0 maxpacket: 8 [ 217.057151][ T6710] usb 5-1: no configurations [ 217.061905][ T6710] usb 5-1: can't read configurations, error -22 [ 217.081426][ T6710] usb usb5-port1: attempt power cycle [ 217.089639][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 217.130391][ T7391] team0: Port device team_slave_0 added [ 217.147845][ T7391] team0: Port device team_slave_1 added [ 217.163512][ T1220] gspca_ov534_9: reg_w failed -71 [ 217.258693][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.280063][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.325532][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.726524][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.018365][ T29] audit: type=1400 audit(1730177637.713:428): avc: denied { setopt } for pid=7609 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.058665][ T29] audit: type=1400 audit(1730177637.743:429): avc: denied { setopt } for pid=7609 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.063741][ T1220] gspca_ov534_9: Unknown sensor 0000 [ 218.078821][ T6710] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 218.092480][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.130298][ T6710] usb 5-1: Using ep0 maxpacket: 8 [ 218.148103][ T25] usb 4-1: USB disconnect, device number 13 [ 218.155999][ T1220] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 218.164130][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.190429][ T6710] usb 5-1: no configurations [ 218.195133][ T6710] usb 5-1: can't read configurations, error -22 [ 218.218991][ T1220] usb 3-1: USB disconnect, device number 15 [ 218.244297][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.345141][ T7618] syz.3.402[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.345245][ T7618] syz.3.402[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.356871][ T7618] syz.3.402[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.377884][ T6710] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.661252][ T7391] hsr_slave_0: entered promiscuous mode [ 218.680495][ T6710] usb 5-1: Using ep0 maxpacket: 8 [ 218.686903][ T6710] usb 5-1: no configurations [ 218.691557][ T6710] usb 5-1: can't read configurations, error -22 [ 218.698556][ T7391] hsr_slave_1: entered promiscuous mode [ 218.766533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.354319][ T7605] binder: 7603:7605 ioctl 4004550e 9999999999999999 returned -22 [ 219.379645][ T6710] usb usb5-port1: unable to enumerate USB device [ 219.467492][ T7391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.475179][ T7391] Cannot create hsr debugfs directory [ 219.806545][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.846570][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.114774][ T7660] misc userio: Invalid payload size [ 221.127447][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 221.158566][ T29] audit: type=1400 audit(1730177641.443:430): avc: denied { read } for pid=7656 comm="syz.4.411" path="socket:[16335]" dev="sockfs" ino=16335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.896551][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.282938][ T6710] libceph: connect (1)[c::]:6789 error -101 [ 222.289084][ T6710] libceph: mon0 (1)[c::]:6789 connect error [ 222.312074][ T29] audit: type=1400 audit(1730177642.593:431): avc: denied { create } for pid=7680 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 222.335764][ T7676] ceph: No mds server is up or the cluster is laggy [ 222.513966][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 222.595512][ T29] audit: type=1400 audit(1730177642.833:432): avc: denied { create } for pid=7686 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 222.807086][ T7690] kvm: emulating exchange as write [ 222.923575][ T7697] FAULT_INJECTION: forcing a failure. [ 222.923575][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 222.936291][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.968513][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.1.420 Not tainted 6.12.0-rc5-syzkaller #0 [ 222.977392][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.987468][ T7697] Call Trace: [ 222.990758][ T7697] [ 222.993699][ T7697] dump_stack_lvl+0x16c/0x1f0 [ 222.998406][ T7697] should_fail_ex+0x497/0x5b0 [ 223.003113][ T7697] should_failslab+0xc2/0x120 [ 223.007812][ T7697] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 223.009437][ T7391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.013193][ T7697] ? skb_clone+0x190/0x3f0 [ 223.024264][ T7697] skb_clone+0x190/0x3f0 [ 223.028529][ T7697] netlink_deliver_tap+0xab3/0xd90 [ 223.033634][ T7697] netlink_unicast+0x6b4/0x7f0 [ 223.038388][ T7697] ? __pfx_netlink_unicast+0x10/0x10 [ 223.043659][ T7697] ? __pfx_nf_tables_abort+0x10/0x10 [ 223.048935][ T7697] netlink_ack+0x6a8/0xb90 [ 223.053360][ T7697] nfnetlink_rcv_batch+0x1626/0x24e0 [ 223.058661][ T7697] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 223.064284][ T7697] ? avc_has_perm_noaudit+0x119/0x3a0 [ 223.069666][ T7697] ? avc_has_perm_noaudit+0x143/0x3a0 [ 223.075049][ T7697] ? __nla_parse+0x40/0x60 [ 223.079466][ T7697] nfnetlink_rcv+0x3c3/0x430 [ 223.084052][ T7697] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.089156][ T7697] netlink_unicast+0x53c/0x7f0 [ 223.093950][ T7697] ? __pfx_netlink_unicast+0x10/0x10 [ 223.099239][ T7697] netlink_sendmsg+0x8b8/0xd70 [ 223.104028][ T7697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.109313][ T7697] ? __might_fault+0xe3/0x190 [ 223.113983][ T7697] ____sys_sendmsg+0xaaf/0xc90 [ 223.118757][ T7697] ? copy_msghdr_from_user+0x10b/0x160 [ 223.124210][ T7697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.129517][ T7697] ? __pfx___lock_acquire+0x10/0x10 [ 223.134706][ T7697] ___sys_sendmsg+0x135/0x1e0 [ 223.139368][ T7697] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.144556][ T7697] ? lock_acquire+0x2f/0xb0 [ 223.149039][ T7697] ? __fget_files+0x40/0x3f0 [ 223.153637][ T7697] ? fdget+0x176/0x210 [ 223.157692][ T7697] __sys_sendmsg+0x117/0x1f0 [ 223.162264][ T7697] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.167355][ T7697] ? __fget_files+0x244/0x3f0 [ 223.172040][ T7697] do_syscall_64+0xcd/0x250 [ 223.176539][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.182439][ T7697] RIP: 0033:0x7fe0ac97e719 [ 223.186854][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.206440][ T7697] RSP: 002b:00007fe0ad812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.214866][ T7697] RAX: ffffffffffffffda RBX: 00007fe0acb35f80 RCX: 00007fe0ac97e719 [ 223.222816][ T7697] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 223.230773][ T7697] RBP: 00007fe0ad812090 R08: 0000000000000000 R09: 0000000000000000 [ 223.238739][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.246687][ T7697] R13: 0000000000000000 R14: 00007fe0acb35f80 R15: 00007ffdc96fdfe8 [ 223.254647][ T7697] [ 223.370712][ T7391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.472555][ T7391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.493898][ T7391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.498254][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 223.662228][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.716824][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.772288][ T7391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.782837][ T7391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.796988][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.804141][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.813445][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.820591][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.853443][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 223.976527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.998812][ T29] audit: type=1400 audit(1730177644.273:433): avc: denied { bind } for pid=7721 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.017934][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.035982][ T29] audit: type=1400 audit(1730177644.283:434): avc: denied { read } for pid=7721 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.263581][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.331909][ T7735] process 'syz.4.426' launched './file0' with NULL argv: empty string added [ 224.363970][ T7391] veth0_vlan: entered promiscuous mode [ 224.375608][ T29] audit: type=1400 audit(1730177644.653:435): avc: denied { execute_no_trans } for pid=7734 comm="syz.4.426" path="/87/file0" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.405464][ T7391] veth1_vlan: entered promiscuous mode [ 224.522792][ T7391] veth0_macvtap: entered promiscuous mode [ 224.578849][ T7391] veth1_macvtap: entered promiscuous mode [ 224.634079][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.644987][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.655803][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.668661][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.679746][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.691033][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.712629][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.725538][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.744052][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.755823][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.809316][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.955434][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.971300][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.981302][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.991954][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.016570][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.588589][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.599678][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.609861][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.621424][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.632094][ T7391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.642696][ T7391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.654148][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.739645][ T7391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.748954][ T7391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.757798][ T7391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.766590][ T7391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.926268][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.984214][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.056523][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.103588][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.137113][ T1220] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 226.158812][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.297373][ T1220] usb 3-1: Using ep0 maxpacket: 16 [ 226.304954][ T1220] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 226.331371][ T1220] usb 3-1: config 0 has no interface number 0 [ 226.363206][ T1220] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.462174][ T1220] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.554483][ T1220] usb 3-1: config 0 interface 41 has no altsetting 0 [ 226.635688][ T29] audit: type=1400 audit(1730177646.913:436): avc: denied { getopt } for pid=7768 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.738954][ T1220] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 226.767191][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.775228][ T1220] usb 3-1: Product: syz [ 226.779534][ T1220] usb 3-1: Manufacturer: syz [ 226.784153][ T1220] usb 3-1: SerialNumber: syz [ 226.795813][ T1220] usb 3-1: config 0 descriptor?? [ 226.802464][ T7758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.809897][ T7758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.957353][ T7770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.086533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.156720][ T29] audit: type=1400 audit(1730177647.403:437): avc: denied { nlmsg_write } for pid=7769 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.286516][ T29] audit: type=1400 audit(1730177647.553:438): avc: denied { getopt } for pid=7775 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.961933][ T7781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2081 sclass=netlink_route_socket pid=7781 comm=syz.1.433 [ 227.979307][ T7781] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.433'. [ 228.126553][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.176556][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.530579][ T1220] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 229.543738][ T1220] usb 3-1: USB disconnect, device number 16 [ 229.656005][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.966961][ T5939] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 230.116610][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 230.123842][ T5939] usb 5-1: config index 0 descriptor too short (expected 22, got 18) [ 230.162535][ T5939] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 230.176299][ T5939] usb 5-1: config 0 has no interface number 0 [ 230.194536][ T5939] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=11.8c [ 230.206968][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.210129][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.223556][ T5939] usb 5-1: Product: syz [ 230.228213][ T5939] usb 5-1: Manufacturer: syz [ 230.233169][ T5939] usb 5-1: SerialNumber: syz [ 230.248042][ T5939] usb 5-1: config 0 descriptor?? [ 230.266067][ T5939] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 230.598508][ T29] audit: type=1400 audit(1730177650.703:439): avc: denied { read } for pid=7798 comm="syz.3.439" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 231.246986][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.393581][ T29] audit: type=1400 audit(1730177650.703:440): avc: denied { open } for pid=7798 comm="syz.3.439" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 231.487798][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.493035][ T29] audit: type=1400 audit(1730177650.873:441): avc: denied { ioctl } for pid=7798 comm="syz.3.439" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 231.525270][ T29] audit: type=1400 audit(1730177651.443:442): avc: denied { call } for pid=7797 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 231.554389][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.563458][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.573309][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.582221][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.589651][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.054945][ T5939] gspca_topro: Sensor cx0342 [ 232.167272][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.296528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.406419][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.664049][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.326543][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.887295][ T6710] usb 5-1: USB disconnect, device number 20 [ 234.068996][ T35] bridge_slave_1: left allmulticast mode [ 234.076558][ T35] bridge_slave_1: left promiscuous mode [ 234.109093][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.149445][ T35] bridge_slave_0: left allmulticast mode [ 234.165360][ T35] bridge_slave_0: left promiscuous mode [ 234.175617][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.232908][ T5842] Bluetooth: hci2: command tx timeout [ 234.376574][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.407042][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.673768][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 235.888381][ T29] audit: type=1400 audit(1730177656.133:443): avc: denied { read } for pid=7871 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.929910][ T7874] NILFS (loop2): device size too small [ 236.439550][ T5826] Bluetooth: hci2: command tx timeout [ 236.456534][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.525195][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 236.857312][ T6710] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 236.965661][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.984696][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.996328][ T35] bond0 (unregistering): Released all slaves [ 237.005624][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 237.012881][ T6710] usb 4-1: device descriptor read/64, error -71 [ 237.496522][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.908542][ T6710] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 238.087005][ T6710] usb 4-1: device descriptor read/64, error -71 [ 238.103686][ T7891] warning: `syz.4.457' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.196843][ T6710] usb usb4-port1: attempt power cycle [ 238.536588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.576546][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.639143][ T5842] Bluetooth: hci2: command tx timeout [ 239.645557][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 239.657276][ T6710] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 239.657742][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.883879][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.926052][ T7809] bridge_slave_0: entered allmulticast mode [ 239.937756][ T7809] bridge_slave_0: entered promiscuous mode [ 239.947841][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.954939][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.964531][ T7809] bridge_slave_1: entered allmulticast mode [ 239.973122][ T7809] bridge_slave_1: entered promiscuous mode [ 239.975722][ T6710] usb 4-1: device descriptor read/8, error -71 [ 240.039811][ T29] audit: type=1400 audit(1730177660.303:444): avc: denied { getattr } for pid=7917 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 240.312066][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.344698][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.476816][ T35] hsr_slave_0: left promiscuous mode [ 240.487252][ T35] hsr_slave_1: left promiscuous mode [ 240.493152][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.501344][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.507186][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.519636][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.529607][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.564983][ T35] veth1_macvtap: left promiscuous mode [ 240.571971][ T35] veth0_macvtap: left promiscuous mode [ 240.577687][ T35] veth1_vlan: left promiscuous mode [ 240.583123][ T35] veth0_vlan: left promiscuous mode [ 240.606785][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.687379][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 240.701255][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 240.711570][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 240.722427][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 240.734451][ T25] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 240.744737][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.753819][ T25] usb 3-1: Product: syz [ 240.758386][ T25] usb 3-1: Manufacturer: syz [ 240.763002][ T25] usb 3-1: SerialNumber: syz [ 240.771946][ T25] usb 3-1: config 0 descriptor?? [ 240.783178][ T25] rndis_host 3-1:0.0: skipping garbage [ 240.790389][ T25] rndis_host 3-1:0.0: invalid descriptor buffer length [ 240.797411][ T25] usb 3-1: bad CDC descriptors [ 240.802646][ T25] cdc_acm 3-1:0.0: skipping garbage [ 240.808090][ T25] cdc_acm 3-1:0.0: invalid descriptor buffer length [ 240.983184][ T25] usb 3-1: USB disconnect, device number 17 [ 241.123307][ T35] team0 (unregistering): Port device team_slave_1 removed [ 241.161557][ T35] team0 (unregistering): Port device team_slave_0 removed [ 241.605469][ T7809] team0: Port device team_slave_0 added [ 241.615052][ T7809] team0: Port device team_slave_1 added [ 241.646924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.711711][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 241.735611][ T5826] Bluetooth: hci2: command tx timeout [ 241.755871][ T7948] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 242.614934][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.638152][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.668677][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.696661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.765238][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.779391][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.816182][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.999287][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 243.010625][ T7982] ipt_rpfilter: unknown options [ 243.477296][ T5953] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 243.726582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.647277][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.681537][ T5953] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 244.722514][ T5953] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 244.732177][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.776532][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.799687][ T5953] usb 3-1: config 0 descriptor?? [ 244.816500][ T29] audit: type=1400 audit(1730177665.043:445): avc: denied { write } for pid=5181 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.848647][ T29] audit: type=1400 audit(1730177665.043:446): avc: denied { remove_name } for pid=5181 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.853225][ T7809] hsr_slave_0: entered promiscuous mode [ 244.871990][ T29] audit: type=1400 audit(1730177665.043:447): avc: denied { add_name } for pid=5181 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.917171][ T5953] gspca_main: spca561-2.14.0 probing abcd:cdee [ 244.932685][ T7809] hsr_slave_1: entered promiscuous mode [ 244.967485][ T6710] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 244.977189][ T7809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.990657][ T7809] Cannot create hsr debugfs directory [ 245.154064][ T6710] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.168863][ T6710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.272903][ T6710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.311549][ T6710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.363151][ T6710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 245.430144][ T5953] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 245.468693][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.475700][ T5953] usb 3-1: MIDIStreaming interface descriptor not found [ 245.516010][ T6710] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.525573][ T6710] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.536895][ T6710] usb 5-1: Product: syz [ 245.560275][ T6710] usb 5-1: Manufacturer: syz [ 245.612117][ T8005] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.660364][ T6710] cdc_wdm 5-1:1.0: skipping garbage [ 245.684461][ T6710] cdc_wdm 5-1:1.0: skipping garbage [ 245.709018][ T6710] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 245.756929][ T5953] usb 3-1: USB disconnect, device number 18 [ 245.786070][ T6710] cdc_wdm 5-1:1.0: Unknown control protocol [ 245.806593][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.919379][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.926171][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 245.933343][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.939957][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 245.946557][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.953180][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 245.960595][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.967224][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 245.974000][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.980626][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 245.989376][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 245.995987][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 246.002288][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 246.008909][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 246.015633][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 246.022259][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 246.029807][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 246.036436][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 246.042862][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 246.049489][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 246.226679][ T1220] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 246.250154][ T5953] usb 5-1: USB disconnect, device number 21 [ 246.406619][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 246.415733][ T1220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.437516][ T1220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.448735][ T1220] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.460440][ T1220] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 246.476979][ T1220] usb 4-1: Manufacturer: syz [ 246.487441][ T1220] usb 4-1: SerialNumber: syz [ 246.597075][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 246.646333][ T7809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.674169][ T7809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.695085][ T7809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.702577][ T1220] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 246.745526][ T7809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.764258][ T1220] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.840881][ T1220] usb 4-1: USB disconnect, device number 18 [ 246.848808][ T29] audit: type=1400 audit(1730177667.123:448): avc: denied { connect } for pid=8060 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 246.856391][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.868293][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.898984][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.915946][ T29] audit: type=1400 audit(1730177667.193:449): avc: denied { read } for pid=8059 comm="syz.1.489" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.941324][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 246.960836][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 246.985904][ T29] audit: type=1400 audit(1730177667.193:450): avc: denied { open } for pid=8059 comm="syz.1.489" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.996303][ T8064] SELinux: syz.1.489 (8064) set checkreqprot to 1. This is no longer supported. [ 247.011236][ T9] usb 3-1: Product: syz [ 247.054079][ T9] usb 3-1: Manufacturer: syz [ 247.070658][ T9] usb 3-1: SerialNumber: syz [ 247.076567][ T29] audit: type=1400 audit(1730177667.263:451): avc: denied { setcheckreqprot } for pid=8059 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.104839][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.112688][ T9] usb 3-1: config 0 descriptor?? [ 247.154601][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.193935][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.201170][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.278476][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.285618][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.457237][ T8074] FAULT_INJECTION: forcing a failure. [ 247.457237][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 247.471123][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.4.491 Not tainted 6.12.0-rc5-syzkaller #0 [ 247.480005][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.490089][ T8074] Call Trace: [ 247.493375][ T8074] [ 247.496309][ T8074] dump_stack_lvl+0x16c/0x1f0 [ 247.501103][ T8074] should_fail_ex+0x497/0x5b0 [ 247.505791][ T8074] ? fs_reclaim_acquire+0xae/0x150 [ 247.510914][ T8074] should_failslab+0xc2/0x120 [ 247.515603][ T8074] __kmalloc_noprof+0xcb/0x400 [ 247.520375][ T8074] ? trace_lock_acquire+0x14a/0x1d0 [ 247.525582][ T8074] ? ksys_write+0x12f/0x260 [ 247.530100][ T8074] kernfs_fop_write_iter+0x223/0x500 [ 247.535407][ T8074] vfs_write+0x5ae/0x1150 [ 247.539750][ T8074] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 247.545571][ T8074] ? trace_lock_acquire+0x14a/0x1d0 [ 247.550785][ T8074] ? __pfx_vfs_write+0x10/0x10 [ 247.555562][ T8074] ? __pfx___mutex_lock+0x10/0x10 [ 247.560621][ T8074] ksys_write+0x12f/0x260 [ 247.564964][ T8074] ? __pfx_ksys_write+0x10/0x10 [ 247.569839][ T8074] do_syscall_64+0xcd/0x250 [ 247.574358][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.580276][ T8074] RIP: 0033:0x7f3aeab7e719 [ 247.584698][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.604326][ T8074] RSP: 002b:00007f3aeb97f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.612762][ T8074] RAX: ffffffffffffffda RBX: 00007f3aead36130 RCX: 00007f3aeab7e719 [ 247.620744][ T8074] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 000000000000000b [ 247.628718][ T8074] RBP: 00007f3aeb97f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.636690][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.644668][ T8074] R13: 0000000000000000 R14: 00007f3aead36130 R15: 00007ffdb340a088 [ 247.652658][ T8074] [ 247.655742][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.785920][ T29] audit: type=1400 audit(1730177668.053:452): avc: denied { module_request } for pid=7809 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 247.886709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.659715][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 248.761461][ T8094] xt_NFQUEUE: number of queues (1280) out of range (got 65795) [ 248.804918][ T8098] xt_NFQUEUE: number of queues (1280) out of range (got 65795) [ 248.920649][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.927581][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.959274][ T7809] veth0_vlan: entered promiscuous mode [ 249.000673][ T7809] veth1_vlan: entered promiscuous mode [ 249.047152][ T29] audit: type=1326 audit(1730177669.333:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aeab7e719 code=0x0 [ 249.070292][ T7809] veth0_macvtap: entered promiscuous mode [ 249.169304][ T7809] veth1_macvtap: entered promiscuous mode [ 249.215467][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.250191][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.286191][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.304040][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.314750][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.966555][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.292168][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.302490][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.313021][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.323407][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.616671][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.638423][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.016630][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.311167][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.327792][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.338291][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.437251][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.447992][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.458991][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.468865][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.479376][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.490334][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.501320][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.512401][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.522774][ T7809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.531562][ T7809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.540334][ T7809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.549608][ T7809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.046563][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.177504][ T29] audit: type=1400 audit(1730177672.463:454): avc: denied { read } for pid=8121 comm="syz.1.503" lport=53882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.495574][ T6942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.641524][ T6942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.655549][ T6942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.663654][ T6942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.086887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 253.291795][ T7488] usb 3-1: USB disconnect, device number 19 [ 254.126525][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 254.185230][ T8150] FAULT_INJECTION: forcing a failure. [ 254.185230][ T8150] name failslab, interval 1, probability 0, space 0, times 0 [ 254.198387][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.3.507 Not tainted 6.12.0-rc5-syzkaller #0 [ 254.207784][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.217848][ T8150] Call Trace: [ 254.221132][ T8150] [ 254.224067][ T8150] dump_stack_lvl+0x16c/0x1f0 [ 254.228768][ T8150] should_fail_ex+0x497/0x5b0 [ 254.233462][ T8150] ? fs_reclaim_acquire+0xae/0x150 [ 254.238587][ T8150] should_failslab+0xc2/0x120 [ 254.243280][ T8150] __kmalloc_noprof+0xcb/0x400 [ 254.248068][ T8150] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 254.253717][ T8150] ? rcu_is_watching+0x12/0xc0 [ 254.258503][ T8150] tomoyo_realpath_from_path+0xb9/0x720 [ 254.264070][ T8150] ? tomoyo_path2_perm+0x295/0x710 [ 254.269209][ T8150] tomoyo_path2_perm+0x2a3/0x710 [ 254.274162][ T8150] ? tomoyo_path2_perm+0x295/0x710 [ 254.279292][ T8150] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 254.284769][ T8150] ? finish_task_switch.isra.0+0x217/0xcc0 [ 254.290589][ T8150] ? __switch_to+0x749/0x1180 [ 254.295288][ T8150] ? mark_lock+0xb5/0xc60 [ 254.299641][ T8150] ? current_check_refer_path+0x2be/0x710 [ 254.305381][ T8150] ? __pfx_current_check_refer_path+0x10/0x10 [ 254.311470][ T8150] tomoyo_path_rename+0x175/0x1b0 [ 254.316508][ T8150] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 254.322078][ T8150] security_path_rename+0x18e/0x3c0 [ 254.327289][ T8150] do_renameat2+0x7a0/0xdd0 [ 254.331832][ T8150] ? __pfx_do_renameat2+0x10/0x10 [ 254.336862][ T8150] ? trace_lock_acquire+0x14a/0x1d0 [ 254.342076][ T8150] ? lock_acquire+0x2f/0xb0 [ 254.346583][ T8150] ? __might_fault+0xe3/0x190 [ 254.351275][ T8150] ? __might_fault+0xe3/0x190 [ 254.355979][ T8150] ? getname_flags.part.0+0x1c5/0x550 [ 254.361377][ T8150] __x64_sys_renameat2+0xe7/0x130 [ 254.366419][ T8150] do_syscall_64+0xcd/0x250 [ 254.370943][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.376851][ T8150] RIP: 0033:0x7fc9ec37e719 [ 254.381271][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.400890][ T8150] RSP: 002b:00007fc9ed18c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 254.409316][ T8150] RAX: ffffffffffffffda RBX: 00007fc9ec536130 RCX: 00007fc9ec37e719 [ 254.417298][ T8150] RDX: ffffffffffffff9c RSI: 0000000020000180 RDI: ffffffffffffff9c [ 254.425279][ T8150] RBP: 00007fc9ed18c090 R08: 0000000000000002 R09: 0000000000000000 [ 254.433290][ T8150] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.441288][ T8150] R13: 0000000000000000 R14: 00007fc9ec536130 R15: 00007ffc96615f88 [ 254.449428][ T8150] [ 254.453712][ T8150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.166587][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.495491][ T29] audit: type=1400 audit(1730177675.773:455): avc: denied { bind } for pid=8163 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.511512][ T8164] netlink: 52 bytes leftover after parsing attributes in process `syz.4.512'. [ 255.546577][ T29] audit: type=1400 audit(1730177675.773:456): avc: denied { setopt } for pid=8163 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.971122][ T8181] input: syz1 as /devices/virtual/input/input12 [ 256.206985][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 256.517163][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 257.246530][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.425415][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 257.547147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.553593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.567085][ T29] audit: type=1400 audit(1730177677.193:457): avc: denied { bind } for pid=8190 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.842516][ T29] audit: type=1400 audit(1730177678.113:458): avc: denied { write } for pid=8208 comm="syz.2.522" path="socket:[19131]" dev="sockfs" ino=19131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 258.286523][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.098563][ T29] audit: type=1400 audit(1730177679.383:459): avc: denied { accept } for pid=8230 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.174215][ T8234] netlink: 'syz.3.526': attribute type 4 has an invalid length. [ 259.182437][ T8234] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.526'. [ 259.326730][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.259996][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.366527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.452749][ T8255] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 260.940430][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.406641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.624738][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.981273][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.992825][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.004097][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.062899][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 262.132679][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.141108][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.149764][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.446565][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.496579][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.699853][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.958417][ T7413] cxacru 2-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 264.207072][ T5826] Bluetooth: hci2: command tx timeout [ 264.223138][ T8308] netlink: 56 bytes leftover after parsing attributes in process `syz.1.538'. [ 264.526559][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.867930][ T1135] bridge_slave_1: left allmulticast mode [ 264.884007][ T1135] bridge_slave_1: left promiscuous mode [ 264.900944][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.933044][ T1135] bridge_slave_0: left allmulticast mode [ 264.973113][ T1135] bridge_slave_0: left promiscuous mode [ 264.982665][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.217551][ T5878] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 265.396539][ T5878] usb 2-1: device descriptor read/64, error -71 [ 265.510322][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.525342][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.542217][ T1135] bond0 (unregistering): Released all slaves [ 265.566548][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.647292][ T5878] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 265.773713][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 265.806965][ T5878] usb 2-1: device descriptor read/64, error -71 [ 265.947483][ T5878] usb usb2-port1: attempt power cycle [ 265.955694][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.988998][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.003869][ T8275] bridge_slave_0: entered allmulticast mode [ 266.049521][ T8275] bridge_slave_0: entered promiscuous mode [ 266.073613][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.084635][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.094482][ T8275] bridge_slave_1: entered allmulticast mode [ 266.112163][ T8275] bridge_slave_1: entered promiscuous mode [ 266.286929][ T5826] Bluetooth: hci2: command tx timeout [ 266.450600][ T5878] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 266.607064][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 266.753858][ T5878] usb 2-1: device descriptor read/8, error -71 [ 266.799936][ T5826] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 266.997131][ T5878] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 267.167703][ T5878] usb 2-1: device descriptor read/8, error -71 [ 267.423015][ T8353] FAULT_INJECTION: forcing a failure. [ 267.423015][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 267.435904][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.2.546 Not tainted 6.12.0-rc5-syzkaller #0 [ 267.444765][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.454825][ T8353] Call Trace: [ 267.458107][ T8353] [ 267.461038][ T8353] dump_stack_lvl+0x16c/0x1f0 [ 267.465750][ T8353] should_fail_ex+0x497/0x5b0 [ 267.470438][ T8353] ? fs_reclaim_acquire+0xae/0x150 [ 267.475560][ T8353] should_failslab+0xc2/0x120 [ 267.480247][ T8353] __kmalloc_noprof+0xcb/0x400 [ 267.485020][ T8353] ? tomoyo_encode2+0x92/0x3e0 [ 267.489800][ T8353] tomoyo_encode2+0x100/0x3e0 [ 267.494489][ T8353] tomoyo_encode+0x29/0x50 [ 267.498911][ T8353] tomoyo_realpath_from_path+0x19d/0x720 [ 267.504558][ T8353] tomoyo_path2_perm+0x2a3/0x710 [ 267.509512][ T8353] ? tomoyo_path2_perm+0x295/0x710 [ 267.514640][ T8353] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 267.520128][ T8353] ? __pfx_mark_lock+0x10/0x10 [ 267.524912][ T8353] ? current_check_refer_path+0x2be/0x710 [ 267.530648][ T8353] ? __pfx_current_check_refer_path+0x10/0x10 [ 267.536732][ T8353] tomoyo_path_rename+0x175/0x1b0 [ 267.541767][ T8353] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 267.547331][ T8353] ? security_path_rename+0xc6/0x3c0 [ 267.552624][ T8353] ? security_path_rename+0x31f/0x3c0 [ 267.558006][ T8353] security_path_rename+0x18e/0x3c0 [ 267.563223][ T8353] do_renameat2+0x7a0/0xdd0 [ 267.567753][ T8353] ? __pfx_do_renameat2+0x10/0x10 [ 267.572788][ T8353] ? trace_lock_acquire+0x14a/0x1d0 [ 267.578004][ T8353] ? lock_acquire+0x2f/0xb0 [ 267.582529][ T8353] ? __might_fault+0xe3/0x190 [ 267.587229][ T8353] ? __might_fault+0xe3/0x190 [ 267.591929][ T8353] ? getname_flags.part.0+0x1c5/0x550 [ 267.597311][ T8353] ? getname_flags+0x13/0xf0 [ 267.602005][ T8353] __x64_sys_renameat2+0xe7/0x130 [ 267.607060][ T8353] do_syscall_64+0xcd/0x250 [ 267.611584][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.617487][ T8353] RIP: 0033:0x7fa53f37e719 [ 267.621906][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.641520][ T8353] RSP: 002b:00007fa5401b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 267.649950][ T8353] RAX: ffffffffffffffda RBX: 00007fa53f536130 RCX: 00007fa53f37e719 [ 267.657923][ T8353] RDX: ffffffffffffff9c RSI: 0000000020000180 RDI: ffffffffffffff9c [ 267.665895][ T8353] RBP: 00007fa5401b3090 R08: 0000000000000002 R09: 0000000000000000 [ 267.673873][ T8353] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.681842][ T8353] R13: 0000000000000000 R14: 00007fa53f536130 R15: 00007ffd06051818 [ 267.689804][ T8353] [ 267.693569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.700985][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.765374][ T5878] usb usb2-port1: unable to enumerate USB device [ 268.045872][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.295725][ T1135] hsr_slave_0: left promiscuous mode [ 268.353129][ T1135] hsr_slave_1: left promiscuous mode [ 268.367634][ T5826] Bluetooth: hci2: command tx timeout [ 268.467510][ T7488] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 268.636105][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.711794][ T7488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.734290][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.744896][ T7488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.762755][ T7488] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 268.772027][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.854054][ T7488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.871462][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.901284][ T7488] usb 4-1: config 0 descriptor?? [ 268.917323][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.984535][ T1135] veth1_macvtap: left promiscuous mode [ 269.028250][ T1135] veth0_macvtap: left promiscuous mode [ 269.039017][ T1135] veth1_vlan: left promiscuous mode [ 269.044861][ T1135] veth0_vlan: left promiscuous mode [ 269.047102][ T5939] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 269.514410][ T7488] wacom 0003:056A:0084.0004: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 269.757132][ T7488] usb 4-1: USB disconnect, device number 19 [ 269.798266][ T5939] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 269.807443][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.815448][ T5939] usb 2-1: Product: syz [ 269.816546][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.843804][ T5939] usb 2-1: Manufacturer: syz [ 269.858115][ T5939] usb 2-1: SerialNumber: syz [ 269.882661][ T5939] usb 2-1: config 0 descriptor?? [ 269.910577][ T5939] hub 2-1:0.0: bad descriptor, ignoring hub [ 269.918139][ T5939] hub 2-1:0.0: probe with driver hub failed with error -5 [ 269.943498][ T5939] mct_u232 2-1:0.0: MCT U232 converter detected [ 269.961930][ T5939] mct_u232 ttyUSB0: expected endpoint missing [ 270.254906][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 270.295223][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 270.448183][ T5826] Bluetooth: hci2: command tx timeout [ 270.856526][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.315141][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.348526][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.547'. [ 271.490234][ T8275] team0: Port device team_slave_0 added [ 271.530410][ T29] audit: type=1400 audit(1730177691.813:460): avc: denied { ioctl } for pid=8390 comm="syz.2.556" path="socket:[20551]" dev="sockfs" ino=20551 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 271.557084][ T8275] team0: Port device team_slave_1 added [ 271.557542][ T7488] usb 2-1: USB disconnect, device number 19 [ 271.797515][ T7488] mct_u232 2-1:0.0: device disconnected [ 271.896535][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.818072][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.869597][ T8406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8406 comm=syz.2.559 [ 272.872967][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.913705][ T8275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.926543][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.091236][ T29] audit: type=1400 audit(1730177693.343:461): avc: denied { append } for pid=8415 comm="syz.3.561" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.106819][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 273.187990][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.194977][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.220927][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.238516][ T8275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.421371][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 273.824407][ T8275] hsr_slave_0: entered promiscuous mode [ 273.847096][ T8275] hsr_slave_1: entered promiscuous mode [ 273.865027][ T8275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.891160][ T8275] Cannot create hsr debugfs directory [ 273.976527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.127053][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 274.163072][ T29] audit: type=1400 audit(1730177694.443:462): avc: denied { open } for pid=8407 comm="syz.1.558" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.186474][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.205910][ T29] audit: type=1400 audit(1730177694.483:463): avc: denied { ioctl } for pid=8407 comm="syz.1.558" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.231648][ T29] audit: type=1400 audit(1730177694.483:464): avc: denied { lock } for pid=8445 comm="syz.3.565" path="socket:[21713]" dev="sockfs" ino=21713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 274.348478][ T29] audit: type=1400 audit(1730177694.613:465): avc: denied { write } for pid=8445 comm="syz.3.565" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 274.447090][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 274.559959][ T25] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.569017][ T25] usb 3-1: config 179 has no interface number 0 [ 274.575322][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 274.596518][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 274.608436][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.619675][ T25] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.631219][ T25] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.645252][ T25] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.654623][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.757301][ T8437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.004708][ T5953] usb 3-1: USB disconnect, device number 20 [ 275.004823][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 275.022597][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.030229][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 275.119279][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 275.311863][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 275.360001][ T8275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.393160][ T8275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.419177][ T8275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.435737][ T8275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.771683][ T8480] input: syz1 as /devices/virtual/input/input19 [ 276.046589][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 276.978336][ T8474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.570'. [ 277.021036][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 277.086537][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.094207][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.109492][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.137725][ T8275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.148242][ T8275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.169274][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.176399][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.185009][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.192153][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.436375][ T29] audit: type=1400 audit(1730177697.713:466): avc: denied { read } for pid=8505 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.973229][ T5939] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 278.002388][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 278.077798][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.130067][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 278.136568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.140050][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.184139][ T5939] usb 2-1: Product: syz [ 278.195064][ T8275] veth0_vlan: entered promiscuous mode [ 278.245080][ T8275] veth1_vlan: entered promiscuous mode [ 278.260504][ T8275] veth0_macvtap: entered promiscuous mode [ 278.266815][ T5939] usb 2-1: Manufacturer: syz [ 278.271399][ T5939] usb 2-1: SerialNumber: syz [ 278.278581][ T8275] veth1_macvtap: entered promiscuous mode [ 278.289407][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.300138][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.310010][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.320830][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.331181][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.341673][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.351521][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.362200][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.372095][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.382583][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.394094][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.403762][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.414242][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.425251][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.436236][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.446062][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.457268][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.467194][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.477656][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.487971][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.498449][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.509368][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.523819][ T8275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.532693][ T8275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.541464][ T8275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.550758][ T8275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.578079][ T5939] usb 2-1: config 0 descriptor?? [ 278.649106][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.579'. [ 278.823477][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 278.848234][ T5939] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 278.916127][ T8537] program syz.4.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.938104][ T6942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.946003][ T6942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.961679][ T29] audit: type=1400 audit(1730177699.193:467): avc: denied { ioctl } for pid=8532 comm="syz.4.580" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 279.020080][ T8384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.049810][ T8384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.166574][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.390495][ T29] audit: type=1400 audit(1730177699.663:468): avc: denied { ioctl } for pid=8543 comm="syz.4.585" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 279.637350][ T7488] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.817362][ T7488] usb 4-1: Using ep0 maxpacket: 16 [ 279.828263][ T7488] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 279.842821][ T7488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.863622][ T7488] usb 4-1: config 0 descriptor?? [ 280.088997][ T7488] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 280.097918][ T7488] usb 4-1: Detected FT4232H [ 280.206590][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.371017][ T5939] pwc: Failed to set LED on/off time (-71) [ 280.377721][ T5939] pwc: send_video_command error -71 [ 280.383057][ T5939] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 280.390677][ T5939] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 280.402453][ T5939] usb 2-1: USB disconnect, device number 20 [ 281.247123][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.894952][ T8570] input: syz1 as /devices/virtual/input/input20 [ 282.229115][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 282.287030][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.320442][ T7488] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 282.335569][ T7488] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 282.367544][ T7488] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 282.463723][ T8582] binder: BINDER_SET_CONTEXT_MGR already set [ 282.470026][ T8582] binder: 8576:8582 ioctl 4018620d 200001c0 returned -16 [ 282.471634][ T7488] usb 4-1: USB disconnect, device number 20 [ 282.615035][ T7488] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 282.625722][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 282.696352][ T7488] ftdi_sio 4-1:0.0: device disconnected [ 282.806862][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 282.833451][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.885730][ T5878] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.960448][ T5878] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 282.961503][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.594'. [ 282.972304][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.999389][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.594'. [ 283.006794][ T5878] usb 2-1: Product: syz [ 283.011861][ T8595] IPv6: sit1: Disabled Multicast RS [ 283.015754][ T5878] usb 2-1: Manufacturer: syz [ 283.042192][ T5878] usb 2-1: SerialNumber: syz [ 283.051643][ T5878] usb 2-1: config 0 descriptor?? [ 283.217334][ T29] audit: type=1400 audit(1730177703.483:469): avc: denied { getopt } for pid=8598 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 283.237891][ T29] audit: type=1400 audit(1730177703.483:470): avc: denied { create } for pid=8598 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 283.259281][ T29] audit: type=1400 audit(1730177703.483:471): avc: denied { write } for pid=8598 comm="syz.4.595" path="socket:[22283]" dev="sockfs" ino=22283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 283.326527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.998233][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.592'. [ 284.276428][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.366527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.688034][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.809925][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.888580][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.115707][ T5983] bridge_slave_1: left allmulticast mode [ 285.129325][ T5983] bridge_slave_1: left promiscuous mode [ 285.176676][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.406561][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.341329][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 286.347200][ T5983] bridge_slave_0: left allmulticast mode [ 286.386637][ T5983] bridge_slave_0: left promiscuous mode [ 286.446594][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.513204][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.892706][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.902836][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.911300][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.919297][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.933012][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.064406][ T29] audit: type=1400 audit(1730177707.343:472): avc: denied { bind } for pid=8659 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.093400][ T29] audit: type=1400 audit(1730177707.343:473): avc: denied { setopt } for pid=8659 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.216887][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.455937][ T29] audit: type=1400 audit(1730177707.733:474): avc: denied { read } for pid=8659 comm="syz.3.600" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 287.486547][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.578306][ T29] audit: type=1400 audit(1730177707.733:475): avc: denied { open } for pid=8659 comm="syz.3.600" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 287.902101][ T29] audit: type=1400 audit(1730177707.733:476): avc: denied { ioctl } for pid=8659 comm="syz.3.600" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 288.154978][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.166410][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.178834][ T5983] bond0 (unregistering): Released all slaves [ 288.192241][ T8653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 288.204120][ T8653] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 288.251049][ T8668] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 288.269646][ T8668] team0: Port device netdevsim0 added [ 288.275631][ T8669] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 288.300428][ T8669] team0: Port device netdevsim0 removed [ 288.313263][ T8669] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 288.346647][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 288.423153][ T965] usb 2-1: USB disconnect, device number 21 [ 288.536560][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.601707][ T29] audit: type=1400 audit(1730177708.883:477): avc: denied { read write } for pid=8673 comm="syz.4.602" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.830428][ T29] audit: type=1400 audit(1730177708.883:478): avc: denied { open } for pid=8673 comm="syz.4.602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.198701][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 289.323996][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 289.353507][ T8693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.606'. [ 289.395341][ T8693] IPv6: sit2: Disabled Multicast RS [ 289.427134][ T5842] Bluetooth: hci2: command tx timeout [ 289.566564][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.606524][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.501859][ T5842] Bluetooth: hci2: command tx timeout [ 291.647053][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 291.895291][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 292.485965][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.510958][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.531687][ T8660] bridge_slave_0: entered allmulticast mode [ 292.533301][ T29] audit: type=1400 audit(1730177712.813:479): avc: denied { sqpoll } for pid=8730 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 292.558357][ T8660] bridge_slave_0: entered promiscuous mode [ 292.686705][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.855206][ T5983] hsr_slave_0: left promiscuous mode [ 292.885891][ T5983] hsr_slave_1: left promiscuous mode [ 292.938628][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.972718][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.078567][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.086139][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.184677][ T5983] veth1_macvtap: left promiscuous mode [ 293.188759][ T29] audit: type=1326 audit(1730177713.463:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aeab7e719 code=0x0 [ 293.190617][ T5983] veth0_macvtap: left promiscuous mode [ 293.219125][ T5983] veth1_vlan: left promiscuous mode [ 293.225432][ T5983] veth0_vlan: left promiscuous mode [ 293.352299][ T8775] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 293.573163][ T5842] Bluetooth: hci2: command tx timeout [ 293.726731][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.081629][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 294.133478][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 294.776640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.407264][ T1220] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 295.567034][ T1220] usb 3-1: device descriptor read/64, error -71 [ 295.647239][ T5842] Bluetooth: hci2: command tx timeout [ 295.806918][ T1220] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 295.816614][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.895039][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.904171][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.917376][ T8660] bridge_slave_1: entered allmulticast mode [ 295.925578][ T8660] bridge_slave_1: entered promiscuous mode [ 295.947228][ T1220] usb 3-1: device descriptor read/64, error -71 [ 296.098725][ T1220] usb usb3-port1: attempt power cycle [ 296.105800][ T29] audit: type=1400 audit(1730177716.383:481): avc: denied { map } for pid=8798 comm="syz.4.628" path="socket:[22710]" dev="sockfs" ino=22710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 296.141081][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.152234][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.229516][ T8660] team0: Port device team_slave_0 added [ 296.246148][ T8660] team0: Port device team_slave_1 added [ 296.399146][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.416215][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.474557][ T1220] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.499050][ T1220] usb 3-1: device descriptor read/8, error -71 [ 296.550174][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.590336][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 296.724196][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.735196][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.748652][ T1220] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 296.798279][ T1220] usb 3-1: device descriptor read/8, error -71 [ 296.803647][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.856595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.917815][ T8798] TCP: out of memory -- consider tuning tcp_mem [ 296.926950][ T1220] usb usb3-port1: unable to enumerate USB device [ 296.949083][ T8660] hsr_slave_0: entered promiscuous mode [ 296.967834][ T8660] hsr_slave_1: entered promiscuous mode [ 296.974035][ T8660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.989145][ T8660] Cannot create hsr debugfs directory [ 297.620330][ T8839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.632'. [ 297.650679][ T29] audit: type=1400 audit(1730177717.933:482): avc: denied { create } for pid=8845 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 297.705543][ T29] audit: type=1400 audit(1730177717.933:483): avc: denied { connect } for pid=8845 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 297.886572][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.796838][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.936545][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 299.140360][ T29] audit: type=1400 audit(1730177719.203:484): avc: denied { setopt } for pid=8865 comm="syz.4.638" lport=45343 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.181252][ T29] audit: type=1400 audit(1730177719.213:485): avc: denied { write } for pid=8865 comm="syz.4.638" lport=45343 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.710440][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 299.742591][ T5878] usb 2-1: config 253 has an invalid interface number: 157 but max is 3 [ 299.752125][ T5878] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 299.763652][ T5878] usb 2-1: config 253 has 1 interface, different from the descriptor's value: 4 [ 299.952319][ T5878] usb 2-1: config 253 has no interface number 0 [ 299.966536][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.075703][ T5878] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 300.221490][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.284319][ T5878] usb 2-1: Product: syz [ 300.301735][ T5878] usb 2-1: Manufacturer: syz [ 300.326542][ T5878] usb 2-1: SerialNumber: syz [ 300.384080][ T5878] r8712u: register rtl8712_netdev_ops to netdev_ops [ 300.421562][ T5878] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 300.453088][ T8660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.490097][ T8660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.520292][ T8660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.617128][ T8660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.862884][ T5878] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 301.016522][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 301.454163][ T5878] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 301.466708][ T5878] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 301.555643][ T5878] usb 2-1: USB disconnect, device number 22 [ 301.567426][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.760713][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.798244][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.805362][ T8384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.815731][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.822934][ T8384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.916407][ T8903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.643'. [ 302.056540][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 302.331341][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.574912][ T8660] veth0_vlan: entered promiscuous mode [ 302.686428][ T8660] veth1_vlan: entered promiscuous mode [ 302.999927][ T8660] veth0_macvtap: entered promiscuous mode [ 303.086597][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 303.935729][ T5953] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 303.972082][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 304.033612][ T8660] veth1_macvtap: entered promiscuous mode [ 304.087078][ T5953] usb 4-1: device descriptor read/64, error -71 [ 304.123900][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.134443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.163282][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.173825][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.184330][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.194261][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.205803][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.215725][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.226422][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.237001][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.247491][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.258574][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.269871][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.280832][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.290735][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.301221][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.312406][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.322924][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.332994][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.344177][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.346897][ T5953] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 304.354012][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.354031][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.355117][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.518903][ T8660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.528374][ T5953] usb 4-1: device descriptor read/64, error -71 [ 304.541369][ T8660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.586571][ T8660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.603207][ T8660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.166554][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 305.178021][ T5953] usb usb4-port1: attempt power cycle [ 305.381893][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.390494][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.399811][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.407788][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.206653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.207425][ T5953] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 307.247022][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 307.384912][ T5953] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.464316][ T5953] usb 4-1: device descriptor read/8, error -71 [ 307.514041][ T29] audit: type=1400 audit(1730177727.783:486): avc: denied { append } for pid=8994 comm="syz.2.657" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.559364][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.597108][ T5953] usb usb4-port1: unable to enumerate USB device [ 307.871229][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.029080][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.145303][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.296527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 308.362882][ T12] bridge_slave_1: left allmulticast mode [ 308.380773][ T12] bridge_slave_1: left promiscuous mode [ 308.387182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.413898][ T12] bridge_slave_0: left allmulticast mode [ 308.419678][ T12] bridge_slave_0: left promiscuous mode [ 308.429872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.944909][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.984646][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.014680][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.049020][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.056706][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.063913][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.129043][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.139473][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.150237][ T12] bond0 (unregistering): Released all slaves [ 309.326553][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 309.477141][ T5953] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 309.659004][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 309.673605][ T5953] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 309.688009][ T5953] usb 2-1: config 0 has no interface number 0 [ 309.696307][ T5953] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 309.714462][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.723953][ T5953] usb 2-1: Product: syz [ 309.743057][ T5953] usb 2-1: Manufacturer: syz [ 309.748262][ T5953] usb 2-1: SerialNumber: syz [ 309.808633][ T5953] usb 2-1: config 0 descriptor?? [ 309.923265][ T12] hsr_slave_0: left promiscuous mode [ 309.931457][ T12] hsr_slave_1: left promiscuous mode [ 309.939017][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.946872][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.961162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.989014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.029057][ T5953] radio-si470x 2-1:0.35: this is not a si470x device. [ 310.036628][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 310.072075][ T12] veth1_macvtap: left promiscuous mode [ 310.094142][ T12] veth0_macvtap: left promiscuous mode [ 310.105012][ T12] veth1_vlan: left promiscuous mode [ 310.125527][ T12] veth0_vlan: left promiscuous mode [ 310.191951][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.211590][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 310.222750][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 310.237661][ T5953] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 310.258439][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.295302][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.309903][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.348249][ T9] usb 4-1: config 0 descriptor?? [ 310.366541][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 310.726579][ T1220] usb 2-1: USB disconnect, device number 23 [ 311.127320][ T5826] Bluetooth: hci2: command tx timeout [ 311.350239][ T9042] tmpfs: Unknown parameter 'usrquota_inode_ha' [ 311.360347][ T9042] netlink: 'syz.4.664': attribute type 18 has an invalid length. [ 311.401595][ T29] audit: type=1400 audit(1730177731.633:487): avc: denied { write } for pid=9036 comm="syz.4.664" path="socket:[24072]" dev="sockfs" ino=24072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.424797][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.783174][ T9] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 311.795036][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 311.851136][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 312.374195][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.415728][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.461143][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 312.877074][ T7488] usb 4-1: USB disconnect, device number 25 [ 312.906957][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 313.095385][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 313.116096][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.129507][ T25] usb 3-1: Product: syz [ 313.146127][ T25] usb 3-1: Manufacturer: syz [ 313.164439][ T25] usb 3-1: SerialNumber: syz [ 313.170037][ T5826] Bluetooth: hci2: command tx timeout [ 313.182686][ T25] usb 3-1: config 0 descriptor?? [ 313.229849][ T25] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 313.245064][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 313.256795][ T9049] netlink: 216 bytes leftover after parsing attributes in process `syz.1.667'. [ 313.345364][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 313.362651][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 313.370719][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 313.378753][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 313.387541][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 313.396748][ T25] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 313.408121][ T25] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 313.414064][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 313.486724][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 313.639335][ T5953] usb 3-1: USB disconnect, device number 25 [ 313.654450][ T5953] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 313.752504][ T5953] keyspan 3-1:0.0: device disconnected [ 313.838161][ T29] audit: type=1400 audit(1730177734.113:488): avc: denied { relabelfrom } for pid=9071 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 313.863013][ T29] audit: type=1400 audit(1730177734.143:489): avc: denied { relabelto } for pid=9071 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 313.882479][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.914518][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.926344][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.935612][ T9006] bridge_slave_0: entered allmulticast mode [ 313.943180][ T9006] bridge_slave_0: entered promiscuous mode [ 314.001624][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 314.034198][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.095284][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.150546][ T9006] bridge_slave_1: entered allmulticast mode [ 314.184578][ T9006] bridge_slave_1: entered promiscuous mode [ 314.267674][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 314.276106][ T9] usb 2-1: config 0 has no interface number 0 [ 314.380345][ T9] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 314.466080][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.484306][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 314.502218][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.511002][ T9] usb 2-1: Product: syz [ 314.523644][ T9] usb 2-1: Manufacturer: syz [ 314.528644][ T9] usb 2-1: SerialNumber: syz [ 314.538333][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 314.569299][ T9] usb 2-1: config 0 descriptor?? [ 314.577588][ T9076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.595942][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.608034][ T9] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 314.626203][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 314.631154][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.665129][ T29] audit: type=1400 audit(1730177734.943:490): avc: denied { read } for pid=9093 comm="syz.4.675" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 314.768789][ T29] audit: type=1400 audit(1730177734.943:491): avc: denied { open } for pid=9093 comm="syz.4.675" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 314.821242][ T9006] team0: Port device team_slave_0 added [ 314.849425][ T9103] netlink: 'syz.2.676': attribute type 9 has an invalid length. [ 314.863155][ T9006] team0: Port device team_slave_1 added [ 314.871930][ T9103] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.676'. [ 314.893230][ T29] audit: type=1400 audit(1730177735.173:492): avc: denied { ioctl } for pid=9101 comm="syz.2.676" path="socket:[24757]" dev="sockfs" ino=24757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.918887][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.000457][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.031915][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.087235][ T25] usb 2-1: USB disconnect, device number 24 [ 315.112725][ T25] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 315.144120][ T25] cyberjack 2-1:0.69: device disconnected [ 315.147022][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.162260][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.169778][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.203534][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.257004][ T5826] Bluetooth: hci2: command tx timeout [ 315.295318][ T9006] hsr_slave_0: entered promiscuous mode [ 315.309207][ T9006] hsr_slave_1: entered promiscuous mode [ 315.316034][ T9006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.329155][ T9006] Cannot create hsr debugfs directory [ 315.566720][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 316.616623][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.377402][ T5826] Bluetooth: hci2: command tx timeout [ 317.647148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.995737][ T9147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 318.113803][ T9006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.132404][ T9006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.251753][ T9006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.304512][ T9006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.405166][ T9155] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.416549][ T9155] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 318.425003][ T9155] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 318.433689][ T9155] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 318.445246][ T29] audit: type=1400 audit(1730177738.723:493): avc: denied { mounton } for pid=9149 comm="syz.3.686" path="/157/file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.468049][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.531100][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.639626][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.672691][ T9006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.683670][ T9006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.696660][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 318.704544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.711705][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.721192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.728339][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.865016][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.872235][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.726731][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 320.766540][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 321.391801][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.396423][ T29] audit: type=1400 audit(1730177741.673:494): avc: denied { listen } for pid=9190 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.806539][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.073765][ T9006] veth0_vlan: entered promiscuous mode [ 322.105375][ T29] audit: type=1400 audit(1730177742.383:495): avc: denied { watch watch_reads } for pid=9196 comm="syz.1.695" path="/proc/542" dev="proc" ino=25171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 322.118441][ T9006] veth1_vlan: entered promiscuous mode [ 322.152711][ T9006] veth0_macvtap: entered promiscuous mode [ 322.171246][ T9006] veth1_macvtap: entered promiscuous mode [ 322.204800][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.476971][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.539719][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.645496][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.660428][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.745714][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.783837][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.846568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.939056][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.950106][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.961074][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.722763][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.747090][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.837156][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.880384][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.890950][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 323.918980][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.944425][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.965262][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.989169][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.000206][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.011471][ T9006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.022449][ T9006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.039124][ T9006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.086856][ T9006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.106202][ T9006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.148805][ T9006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.164169][ T9006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.187065][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 324.361971][ T25] usb 5-1: device descriptor read/64, error -71 [ 324.431707][ T9239] input: syz1 as /devices/virtual/input/input21 [ 324.926607][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 325.075159][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.096233][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.159324][ T8384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.177030][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 325.186167][ T8384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.267213][ T9251] veth0_macvtap: left promiscuous mode [ 325.285377][ T9251] macvtap0: entered allmulticast mode [ 325.316696][ T25] usb 5-1: device descriptor read/64, error -71 [ 325.354006][ T9247] [ 325.356378][ T9247] ====================================================== [ 325.363399][ T9247] WARNING: possible circular locking dependency detected [ 325.370418][ T9247] 6.12.0-rc5-syzkaller #0 Not tainted [ 325.375784][ T9247] ------------------------------------------------------ [ 325.382796][ T9247] syz.2.702/9247 is trying to acquire lock: [ 325.388679][ T9247] ffff88807ab13a98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.398256][ T9247] [ 325.398256][ T9247] but task is already holding lock: [ 325.405613][ T9247] ffff888034ead7b0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 325.416348][ T9247] [ 325.416348][ T9247] which lock already depends on the new lock. [ 325.416348][ T9247] [ 325.426744][ T9247] [ 325.426744][ T9247] the existing dependency chain (in reverse order) is: [ 325.435750][ T9247] [ 325.435750][ T9247] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 325.444455][ T9247] down_write+0x93/0x200 [ 325.449236][ T9247] process_measurement+0x39c/0x2370 [ 325.454976][ T9247] ima_file_mmap+0x146/0x1d0 [ 325.460090][ T9247] security_mmap_file+0x8bd/0x990 [ 325.465631][ T9247] __do_sys_remap_file_pages+0x526/0x900 [ 325.471776][ T9247] do_syscall_64+0xcd/0x250 [ 325.476793][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.483196][ T9247] [ 325.483196][ T9247] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 325.490738][ T9247] __lock_acquire+0x250b/0x3ce0 [ 325.496107][ T9247] lock_acquire.part.0+0x11b/0x380 [ 325.501719][ T9247] down_read_killable+0x9d/0x380 [ 325.507161][ T9247] lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.512865][ T9247] do_user_addr_fault+0x2b5/0x13f0 [ 325.518489][ T9247] exc_page_fault+0x5c/0xc0 [ 325.523500][ T9247] asm_exc_page_fault+0x26/0x30 [ 325.528860][ T9247] fault_in_readable+0xee/0x200 [ 325.534216][ T9247] fault_in_iov_iter_readable+0x101/0x2c0 [ 325.540442][ T9247] generic_perform_write+0x21b/0x920 [ 325.546229][ T9247] shmem_file_write_iter+0x10e/0x140 [ 325.552019][ T9247] vfs_write+0x5ae/0x1150 [ 325.556861][ T9247] ksys_write+0x12f/0x260 [ 325.561707][ T9247] do_syscall_64+0xcd/0x250 [ 325.566725][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.573126][ T9247] [ 325.573126][ T9247] other info that might help us debug this: [ 325.573126][ T9247] [ 325.583333][ T9247] Possible unsafe locking scenario: [ 325.583333][ T9247] [ 325.590762][ T9247] CPU0 CPU1 [ 325.596121][ T9247] ---- ---- [ 325.601462][ T9247] lock(&sb->s_type->i_mutex_key#12); [ 325.606916][ T9247] lock(&mm->mmap_lock); [ 325.613752][ T9247] lock(&sb->s_type->i_mutex_key#12); [ 325.621713][ T9247] rlock(&mm->mmap_lock); [ 325.626110][ T9247] [ 325.626110][ T9247] *** DEADLOCK *** [ 325.626110][ T9247] [ 325.634228][ T9247] 3 locks held by syz.2.702/9247: [ 325.639232][ T9247] #0: ffff8880352c0d38 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 325.648277][ T9247] #1: ffff888025c44420 (sb_writers#6){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 325.657241][ T9247] #2: ffff888034ead7b0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 325.668381][ T9247] [ 325.668381][ T9247] stack backtrace: [ 325.674253][ T9247] CPU: 0 UID: 0 PID: 9247 Comm: syz.2.702 Not tainted 6.12.0-rc5-syzkaller #0 [ 325.683080][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.693123][ T9247] Call Trace: [ 325.696384][ T9247] [ 325.699299][ T9247] dump_stack_lvl+0x116/0x1f0 [ 325.703977][ T9247] print_circular_bug+0x41c/0x610 [ 325.709000][ T9247] check_noncircular+0x31a/0x400 [ 325.713930][ T9247] ? __pfx_check_noncircular+0x10/0x10 [ 325.719380][ T9247] ? lockdep_lock+0xc6/0x200 [ 325.723967][ T9247] ? __pfx_lockdep_lock+0x10/0x10 [ 325.728982][ T9247] __lock_acquire+0x250b/0x3ce0 [ 325.733820][ T9247] ? __pfx___lock_acquire+0x10/0x10 [ 325.739007][ T9247] ? cmp_ex_search+0x8b/0xb0 [ 325.743580][ T9247] ? bsearch+0x9e/0xc0 [ 325.747637][ T9247] lock_acquire.part.0+0x11b/0x380 [ 325.752731][ T9247] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.758090][ T9247] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 325.763707][ T9247] ? rcu_is_watching+0x12/0xc0 [ 325.768474][ T9247] ? trace_lock_acquire+0x14a/0x1d0 [ 325.773659][ T9247] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.779014][ T9247] ? lock_acquire+0x2f/0xb0 [ 325.783499][ T9247] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.788853][ T9247] down_read_killable+0x9d/0x380 [ 325.793775][ T9247] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.799131][ T9247] ? __pfx_down_read_killable+0x10/0x10 [ 325.804657][ T9247] ? __pfx_search_extable+0x10/0x10 [ 325.809836][ T9247] ? fault_in_readable+0xee/0x200 [ 325.814843][ T9247] lock_mm_and_find_vma+0x3a9/0x6a0 [ 325.820025][ T9247] do_user_addr_fault+0x2b5/0x13f0 [ 325.825128][ T9247] exc_page_fault+0x5c/0xc0 [ 325.829620][ T9247] asm_exc_page_fault+0x26/0x30 [ 325.834462][ T9247] RIP: 0010:fault_in_readable+0xee/0x200 [ 325.840083][ T9247] Code: 01 cb 0f ae e8 4d 89 ee 31 ff 41 81 e6 ff 0f 00 00 4c 89 f6 e8 f3 28 ba ff 4d 85 f6 0f 84 f2 00 00 00 e8 75 26 ba ff 45 31 f6 <41> 8a 45 00 31 ff 44 89 f6 88 44 24 28 e8 a0 28 ba ff 45 85 f6 0f [ 325.859674][ T9247] RSP: 0018:ffffc90003eb7b18 EFLAGS: 00050246 [ 325.865723][ T9247] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000d6a4000 [ 325.873677][ T9247] RDX: 0000000000040000 RSI: ffffffff81d355cb RDI: 0000000000000007 [ 325.881626][ T9247] RBP: 0000000020300100 R08: 0000000000000007 R09: 0000000000000000 [ 325.889579][ T9247] R10: 0000000000000100 R11: 0000000000000000 R12: 00000000000f1000 [ 325.897534][ T9247] R13: 000000002020f100 R14: 0000000000000000 R15: 1ffff920007d6f64 [ 325.905495][ T9247] ? fault_in_readable+0xeb/0x200 [ 325.910515][ T9247] ? fault_in_readable+0xeb/0x200 [ 325.915523][ T9247] ? __pfx_fault_in_readable+0x10/0x10 [ 325.920971][ T9247] ? inode_to_bdi+0x9e/0x160 [ 325.925564][ T9247] fault_in_iov_iter_readable+0x101/0x2c0 [ 325.931288][ T9247] generic_perform_write+0x21b/0x920 [ 325.936578][ T9247] ? __pfx_generic_perform_write+0x10/0x10 [ 325.942388][ T9247] ? __pfx_generic_write_checks+0x10/0x10 [ 325.948110][ T9247] ? trace_lock_acquire+0x14a/0x1d0 [ 325.953313][ T9247] shmem_file_write_iter+0x10e/0x140 [ 325.958597][ T9247] vfs_write+0x5ae/0x1150 [ 325.962930][ T9247] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 325.968728][ T9247] ? trace_lock_acquire+0x14a/0x1d0 [ 325.973912][ T9247] ? __pfx_vfs_write+0x10/0x10 [ 325.978665][ T9247] ? __pfx___mutex_lock+0x10/0x10 [ 325.983687][ T9247] ksys_write+0x12f/0x260 [ 325.988005][ T9247] ? __pfx_ksys_write+0x10/0x10 [ 325.992848][ T9247] do_syscall_64+0xcd/0x250 [ 325.997345][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.003239][ T9247] RIP: 0033:0x7fa53f37e719 [ 326.006635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 326.007629][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.034135][ T9247] RSP: 002b:00007fa5401b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.042538][ T9247] RAX: ffffffffffffffda RBX: 00007fa53f536130 RCX: 00007fa53f37e719 [ 326.050583][ T9247] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 0000000000000005 [ 326.058540][ T9247] RBP: 00007fa53f3f132e R08: 0000000000000000 R09: 0000000000000000 [ 326.066497][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.074449][ T9247] R13: 0000000000000000 R14: 00007fa53f536130 R15: 00007ffd06051818 [ 326.082417][ T9247] [ 326.085472][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.095464][ T25] usb usb5-port1: attempt power cycle [ 326.165648][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6600000000 [ 326.205149][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfe00000000 [ 326.221626][ T9243] kvm: kvm [9242]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3ef00000800 [ 326.466553][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.476925][ T5939] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 326.490816][ T25] usb 5-1: device descriptor read/8, error -71 [ 326.637117][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 326.645812][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.661641][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.672453][ T5939] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 326.683221][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.699981][ T5939] usb 3-1: config 0 descriptor?? [ 326.736523][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 326.757509][ T25] usb 5-1: device descriptor read/8, error -71 [ 326.866738][ T25] usb usb5-port1: unable to enumerate USB device [ 327.086550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 327.114055][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.127175][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.142394][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.152345][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.760217][ T1163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.821045][ T1163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.865956][ T1163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.951516][ T1163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.037543][ T1163] bridge_slave_1: left allmulticast mode [ 328.043223][ T1163] bridge_slave_1: left promiscuous mode [ 328.066782][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.078285][ T1163] bridge_slave_0: left allmulticast mode [ 328.083975][ T1163] bridge_slave_0: left promiscuous mode [ 328.107245][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.136518][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 328.230702][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 328.240840][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 328.264907][ T5939] usb 3-1: USB disconnect, device number 26 [ 328.299703][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.310540][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.328102][ T1163] bond0 (unregistering): Released all slaves [ 328.667165][ T1163] hsr_slave_0: left promiscuous mode [ 328.672894][ T1163] hsr_slave_1: left promiscuous mode [ 328.692333][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.701429][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.711727][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.719576][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.730630][ T1163] veth1_macvtap: left promiscuous mode [ 328.736170][ T1163] veth0_macvtap: left promiscuous mode [ 328.742573][ T1163] veth1_vlan: left promiscuous mode [ 328.749950][ T1163] veth0_vlan: left promiscuous mode [ 328.917078][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 328.950517][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 329.166509][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 330.206521][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.256510][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 331.402013][ T29] audit: type=1400 audit(1730177751.683:496): avc: denied { sys_chroot } for pid=9410 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 331.430654][ T29] audit: type=1400 audit(1730177751.713:497): avc: denied { setgid } for pid=9410 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 331.455863][ T29] audit: type=1400 audit(1730177751.713:498): avc: denied { setrlimit } for pid=9410 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 332.296513][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.326527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 334.366531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available