last executing test programs: 3m15.538927209s ago: executing program 1 (id=1114): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000129000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xa8, &(0x7f0000000600)=ANY=[], 0x0) writev(r2, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x240088c0) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m14.602756397s ago: executing program 1 (id=1117): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getpriority(0x2, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4300a9134a9ad02fb5d735a7f37dec6f12de92380000", @ANYRES16=r5, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r10, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)) 3m14.489818669s ago: executing program 1 (id=1119): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8, 0x2, 0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000000000def823b3988fd05200000700000a140000001100010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) 3m13.239280241s ago: executing program 1 (id=1126): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x26, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 3m12.127669189s ago: executing program 1 (id=1132): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e0023000069"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x80, 0x0, &(0x7f0000000500)=[@increfs, @exit_looper, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/6, 0x6, 0x2, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/58, 0x3a, 0x1, 0x1f}, @fda={0x66646185, 0x2, 0x2, 0x12}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper, @clear_death={0x400c630f, 0x1}], 0xa, 0x0, &(0x7f0000000580)="b5502a2fce9bc653da6e"}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="d196c3689c59c2307aeb0f2bcf976746e28d9b185eaf8902", 0x18}, {&(0x7f0000000100)="a31906d97550a6069daca7b54f024da527839bfe5c58b5f5507ac89b8672e14457deccdf4bcb36df9aa236ef98f6acff9fd84eedddc3e19d76a17dca391e233a92d97324eaed5ab10c909f63416866f8e2de0f5ec4571fcea7c69ab02226984cccaa8e847d0f98d6101a44487797b291f8be1e332e5a0a9087adccd88cb9772f41805bef14b76d7eb719aa7546b4f8a6898d70c0a2", 0x95}, {&(0x7f00000001c0)="4a6a366d649788f0c472496129f5717e0f44256ca6160cef5d190237034765e532d83723a31c940920b8dd5b6f5f32cda7a52614f3d7485dbf3c640263f903d309d844a816633b8d5ced85145ecd1f8941bfa9e5509ef85abe318deaa03ceaa3898d591759d939e1aa2e37ffb4bf332666f89622f30be052ca065650740ba72fd767214729ba03e6331c", 0x8a}, {&(0x7f0000000280)="5853bb98c10638db252acab0db4c4e377c49805d645a26e83952ba1c2fcb3c1f98971ac6496c508a2e03018eb9560e9713107c46d82e41be67a5c4f7907dea3eed3be2d5ee1d37dcc5324db34030989a49017eae64b4872fa62f8b3a88b83e6911d5def0ded6fdb7b57c7a22d16dbdd7ddd0941e77a0312324cf45abe06cddec363709a3fc3e810b4a97e1e8c6b06b9c8385a802215ef4b14a618e9fdbaf188b11f0db057869ec641cbb05611e9e56f624eaf20a58d29fa5b7ea2c0f1a9c6a85cc845db876dc9479892404f525b1037e8043c2875b3d062277a94d9de39b3c4bf13b9ac634d21eb9a5c266815a01972c8bd7ef2540", 0xf5}], 0x4) 3m10.737980068s ago: executing program 1 (id=1136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xf7fb6818eeda6d45, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c815}, 0x440c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESDEC=r2], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x40, 0x10, 0x5, "80b6926430"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000340)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m55.649409951s ago: executing program 32 (id=1136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xf7fb6818eeda6d45, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c815}, 0x440c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESDEC=r2], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x40, 0x10, 0x5, "80b6926430"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000340)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.658889519s ago: executing program 3 (id=1269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r5, &(0x7f00000001c0), &(0x7f0000001200)=@udp, 0x1}, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000003c0)={0x9e, "93dcf6b202fb46de9fd8e4fbde302ae526a702ecb7e4231cc59fe6e50afdacae6897e546c9d16bc917df6d18b1341fe8651f5d5886590583b8b42e25f7ad546c60d1acb31d9300120c8f06e0369aeb60d8a78809b062c6599c2baf3615ecd7c2faf508f5cca9b5700b1dad51849f0c30926c1f051cbb1f33569a644bf7cadf6674dc7fb1239ec3c78a868c659dfd0fa21065c5429c3bd19561847b55def1"}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 2m27.829491923s ago: executing program 3 (id=1274): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m26.026949933s ago: executing program 3 (id=1276): socket(0x2, 0xa, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) pipe2$9p(&(0x7f0000000000), 0x800) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 2m20.275417261s ago: executing program 3 (id=1292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000001780)) 2m19.680948592s ago: executing program 3 (id=1294): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair(0x9, 0x3, 0x100, &(0x7f00000001c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB='\f\x00'], 0x3c}}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x612, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 2m19.451488562s ago: executing program 3 (id=1296): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = gettid() ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000380)={0x4, 0xfffffff8, [{0x5, 0x0, 0xfffffffffffffffa}, {0x1, 0x0, 0x5}, {0x5, 0x0, 0x7}, {0x1f014d01, 0x0, 0x2}, {0xfff, 0x0, 0xfffffffffffffbff}, {0x4, 0x0, 0x80000000}, {0x285, 0x0, 0x52912295}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0xffffffffffffffd0}, {0x400, 0x0, 0x6}, {0x4, 0x0, 0x8b41}, {0x8, 0x0, 0xe4c}, {0xb, 0x0, 0xfffffffffffffff7}, {0xfffffbff, 0x0, 0x3}, {0x2, 0x0, 0xc0}, {0x40000000, 0x0, 0x7e6}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r4, 0x0, 0x0) r9 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m3.604807765s ago: executing program 33 (id=1296): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = gettid() ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000380)={0x4, 0xfffffff8, [{0x5, 0x0, 0xfffffffffffffffa}, {0x1, 0x0, 0x5}, {0x5, 0x0, 0x7}, {0x1f014d01, 0x0, 0x2}, {0xfff, 0x0, 0xfffffffffffffbff}, {0x4, 0x0, 0x80000000}, {0x285, 0x0, 0x52912295}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0xffffffffffffffd0}, {0x400, 0x0, 0x6}, {0x4, 0x0, 0x8b41}, {0x8, 0x0, 0xe4c}, {0xb, 0x0, 0xfffffffffffffff7}, {0xfffffbff, 0x0, 0x3}, {0x2, 0x0, 0xc0}, {0x40000000, 0x0, 0x7e6}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r4, 0x0, 0x0) r9 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m12.462608328s ago: executing program 6 (id=1485): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000993cefc94383a3ec3bf0ff48b256784f7b7876304332c54f001a00010029bd70000000000002202000000000000020004245000100e0000097b3769f00ac1414bb"], 0x2c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25050000000800030025"], 0x1c}, 0x1, 0x0, 0x0, 0x42000004}, 0x40000) close(0x3) 1m11.813785687s ago: executing program 6 (id=1486): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(r5, 0x0, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) 1m8.884585775s ago: executing program 6 (id=1494): openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"], 0xf8}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) r3 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m4.799321293s ago: executing program 6 (id=1499): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2000, 0x100, 0x5}, 0x18) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0xa, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x9, 0x73, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x80, 0x195c, 0xffff9a87}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x5}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000007c0)=[@in={0x2, 0x4e28, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffffff81}, &(0x7f0000000040)=0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000002000000013903000101000071b7400010000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000000600000018560000090000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018280000", @ANYRES32=r1, @ANYBLOB="000000000300000085100000070000020000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x8000, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x1, 0xa, 0x3}], 0x10, 0x4}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0xaaaaaaaaaaaab2c, 0x201, 0x0, 0x0, 0x42, 0x74}) 1m1.764609244s ago: executing program 5 (id=1501): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r0, &(0x7f0000001140)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010300}, 0x10, 0x0}}], 0x1, 0x4084) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 59.524782955s ago: executing program 4 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="381864252ce0ffd5c9dffb72bc7c3a5be37b7e645ee1e8efdc3776bcb3d4d66304bdff7e5d91e7d460", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56}, 0x28) socket(0x2b, 0x1, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x9}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = semget(0x1, 0x4, 0x269) semop(r4, &(0x7f0000000100)=[{0x2, 0xd, 0x1800}, {0x1, 0xffc0, 0x1000}], 0x2) read$FUSE(r3, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5ae) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000000) r6 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="0000886c000000f40000aaaaaaaaaa18810028000011aa0ed8d4285a189742c1588e8b04b7247e3c3130089c8ff5d9b925369d5b7e018a6fa9ed0fb4f0b5c11d314f8599b104861a4f5f4e91300f60b24070239564410a9971ed8a85691fefbd30893a810371d1a18333eed0812cdda08d18246a9d4535958d04562e5bbe2f72cf218239ae7e27310499"], 0x19) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) 59.249937258s ago: executing program 6 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40045) msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd700001dcdf250100000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="1e05d47d5dfffffffff29a3e05ca67c2b4d06138444fe25db16941b732439682a7f7df7d37b9c571f2531c6f5804021dd42b2daa52c161b0cd3ed61c7b637e6357a74fbd44c4919e7419a801c5f1c07af11325cdedea161fa5db10614e315bee71ccfd9aa949bf746d56932251c2e6d6d32bdcd482ad8294209ed44fb84e52eb71919e2a8cda4234609ac09bb766034c8831097e997c1724f791df09b69e7ecc3d4804102b00f3cb56ed2e13a86ce1a535c5638295e3db1ba7b051e1b46e80ba576a2799500211819097ed42ed338023fff60e3b768a196ebafc0dd1"], 0x60}, 0x1, 0x400000000000000}, 0x40810) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 58.017350824s ago: executing program 4 (id=1508): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x2], 0x0, 0x0, 0x0, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000002c0)=0x4) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(r5, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x36, 0x3, "eb1fbf9869c10ffb69994678f9c5516b5d9dcd4fb19b4514e3780e70ea492f0d44427fea6c0b39272302a1c725b25320b91a73553de4130c50a9c715e205c0", 0x1}, 0x60) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7ec698122cbcb440449384153a000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r7, 0x400, 0x70bd27, 0x9, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x208}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 58.016807613s ago: executing program 5 (id=1509): openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"], 0xf8}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) r3 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 56.407256725s ago: executing program 0 (id=1514): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000129000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xa8, &(0x7f0000000600)=ANY=[], 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x240088c0) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 54.39316919s ago: executing program 6 (id=1515): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x88a8}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24040080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x8) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 51.19737404s ago: executing program 0 (id=1516): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 51.153876123s ago: executing program 4 (id=1517): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0xf5, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 50.80536304s ago: executing program 0 (id=1518): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x80, 0x0, &(0x7f0000000500)=[@increfs, @exit_looper, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/6, 0x6, 0x2, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/58, 0x3a, 0x1, 0x1f}, @fda={0x66646185, 0x2, 0x2, 0x12}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper, @clear_death={0x400c630f, 0x1}], 0xa, 0x0, &(0x7f0000000580)="b5502a2fce9bc653da6e"}) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="d196c3689c59c2307aeb0f2bcf976746e28d9b185eaf8902", 0x18}, {&(0x7f0000000100)="a31906d97550a6069daca7b54f024da527839bfe5c58b5f5507ac89b8672e14457deccdf4bcb36df9aa236ef98f6acff9fd84eedddc3e19d76a17dca391e233a92d97324eaed5ab10c909f63416866f8e2de0f5ec4571fcea7c69ab02226984cccaa8e847d0f98d6101a44487797b291f8be1e332e5a0a9087adccd88cb9772f41805bef14b76d7eb719aa7546b4f8a6898d70c0a2", 0x95}, {&(0x7f00000001c0)="4a6a366d649788f0c472496129f5717e0f44256ca6160cef5d190237034765e532d83723a31c940920b8dd5b6f5f32cda7a52614f3d7485dbf3c640263f903d309d844a816633b8d5ced85145ecd1f8941bfa9e5509ef85abe318deaa03ceaa3898d591759d939e1aa2e37ffb4bf332666f89622f30be052ca065650740ba72fd767214729ba03e6331c", 0x8a}, {&(0x7f0000000280)="5853bb98c10638db252acab0db4c4e377c49805d645a26e83952ba1c2fcb3c1f98971ac6496c508a2e03018eb9560e9713107c46d82e41be67a5c4f7907dea3eed3be2d5ee1d37dcc5324db34030989a49017eae64b4872fa62f8b3a88b83e6911d5def0ded6fdb7b57c7a22d16dbdd7ddd0941e77a0312324cf45abe06cddec363709a3fc3e810b4a97e1e8c6b06b9c8385a802215ef4b14a618e9fdbaf188b11f0db057869ec641cbb05611e9e56f624eaf20a58d29fa5b7ea2c0f1a9c6a85cc845db876dc9479892404f525b1037e8043c2875b3d062277a94d9de39b3c4bf13b9ac634d21eb9a5c266815a01972c8bd7ef2540", 0xf5}], 0x4) 50.78570643s ago: executing program 4 (id=1519): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xd8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f00000009c0)="96b9006dcccdb5eeab4dd902ed97cf1bb46034cef24f60bf130daee1dd6d1e36e6e1d969ac868f1d000f3ab37e42845e627d4e3940424bfc7e87a509ea4ea54648806573f9f057bd3a73700c30f60db9ae533805"}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x24, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, r11, 0x1, 0xfffffffe, 0x10000}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000018c0)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000000700)={0x1160, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf52}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x10a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "09903c4d9c12a1a630d0402a15856aefa5b57be0e2e76d5e96aefb67"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24aeb5470c052cd19cef0ec24d973f995e46a4d5aac200003c"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) 50.6569821s ago: executing program 2 (id=1520): set_mempolicy(0x3, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x30021, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x80000000}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x9, 0x80000000000006) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r7], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r9) socket$key(0xf, 0x3, 0x2) 50.067126282s ago: executing program 4 (id=1521): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000993cefc94383a3ec3bf0ff48b256784f7b7876304332c54f001a00010029bd70000000000002202000000000000020004245000100e0000097b3769f00ac1414bb"], 0x2c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25050000000800030025"], 0x1c}, 0x1, 0x0, 0x0, 0x42000004}, 0x40000) close(0x3) 49.818451897s ago: executing program 4 (id=1522): set_mempolicy(0x3, 0x0, 0x800) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x30021, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x80000000}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r5], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) socket$key(0xf, 0x3, 0x2) 49.164474632s ago: executing program 5 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getpriority(0x2, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4300a9134a9ad02fb5d735a7f37dec6f12de92380000", @ANYRES16=r5, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) 40.857001004s ago: executing program 2 (id=1524): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0xc050) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) shutdown(r2, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000009dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0, 0xfc87}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2f) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3}, 0x18, 0x0) 40.742502152s ago: executing program 5 (id=1525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xb4843, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) get_robust_list(r3, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000f80)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x1, "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", 0x5, 0x1a, 0x0, 0x2, 0x81, 0x7, 0x7}}}, 0x128) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e222000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b080800418e224e0004fcff", 0x58}], 0x1) 40.730535729s ago: executing program 0 (id=1526): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000129000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xa8, &(0x7f0000000600)=ANY=[], 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x240088c0) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 35.143426723s ago: executing program 34 (id=1515): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x88a8}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24040080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x8) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 33.886842799s ago: executing program 5 (id=1528): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) epoll_create1(0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'wrr\x00', 0x4, 0x1, 0x46}, {@empty, 0x4e22, 0x4, 0x3, 0x800, 0x1}}, 0x44) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) 33.886290687s ago: executing program 2 (id=1529): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e13901f45ac3ad8c2ee9169972ef1941"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 33.491279784s ago: executing program 35 (id=1522): set_mempolicy(0x3, 0x0, 0x800) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x30021, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x80000000}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r5], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) socket$key(0xf, 0x3, 0x2) 33.239397699s ago: executing program 0 (id=1531): landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2}, 0x18, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x434981) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x7fffffff, 0x2, 0x34e8}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000010340)) ptrace(0x10, r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x480000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x30, 0xffffffffffffffff, 0x0) 31.673771866s ago: executing program 2 (id=1532): syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0x7f00, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000240)={0x1, 0x2, 0x8000000000000, 0x2, 0xdae, 0xea}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x2, 0xfd, 0x3, 0x9, 0xb}, &(0x7f0000000100)=0x20) socket$nl_route(0x10, 0x3, 0x0) 27.165942853s ago: executing program 0 (id=1533): write$P9_RWALK(0xffffffffffffffff, 0x0, 0x23) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x322) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept$alg(r6, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x0, 0x400006, 0x4, 0x40000, 0x1}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) 27.154866684s ago: executing program 2 (id=1534): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r1, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000003c0)="aa7742d1fd451005faed417201883804b19abd7cc919ab4713e3458f4f82db64ec", 0x21}], 0x1, 0x0, 0x0, 0x40014}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x2, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = userfaultfd(0x80801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000000)=0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704c9b72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd2c67100cc9d523a00fd53d03000000000000004a62fb73c33424b437bb192c9d06ea6ed0491ba35c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1964f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe8def4b73905ca14d90d1f600"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0xb, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 26.99153023s ago: executing program 5 (id=1535): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getpriority(0x2, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4300a9134a9ad02fb5d735a7f37dec6f12de92380000", @ANYRES16=r5, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) 15.942446259s ago: executing program 2 (id=1536): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r2 = fsmount(0xffffffffffffffff, 0x1, 0x6) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@ipv4_getnexthop={0x28, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x2, 0x3, 0x3}, 0x6, 0x4, &(0x7f0000000340)={{0xe261, 0x5, 0xc949, 0x2}}, 0x5, 0x0, 0xac}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x20000080) 12.268235051s ago: executing program 8 (id=1530): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r1, 0x0, &(0x7f0000346000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r1, 0x0, &(0x7f0000345000/0x3000)=nil, 0x3000, 0x8000004004000004}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000a0001007770616e31000000"], 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, 0x0) sendmsg$TIPC_CMD_GET_NODES(r9, 0x0, 0x20040891) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 882.186108ms ago: executing program 36 (id=1533): write$P9_RWALK(0xffffffffffffffff, 0x0, 0x23) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x322) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept$alg(r6, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x0, 0x400006, 0x4, 0x40000, 0x1}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) 695.962681ms ago: executing program 37 (id=1535): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getpriority(0x2, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4300a9134a9ad02fb5d735a7f37dec6f12de92380000", @ANYRES16=r5, @ANYBLOB="010000000000000000003a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) 0s ago: executing program 38 (id=1536): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r2 = fsmount(0xffffffffffffffff, 0x1, 0x6) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@ipv4_getnexthop={0x28, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x2, 0x3, 0x3}, 0x6, 0x4, &(0x7f0000000340)={{0xe261, 0x5, 0xc949, 0x2}}, 0x5, 0x0, 0xac}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x20000080) kernel console output (not intermixed with test programs): 1: Using ep0 maxpacket: 32 [ 528.277860][ T5615] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 528.286993][ T5615] usb 3-1: config 0 has no interface number 0 [ 528.346684][ T5615] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 528.403310][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.457538][ T5615] usb 3-1: Product: syz [ 528.489491][ T5615] usb 3-1: Manufacturer: syz [ 528.528242][ T5615] usb 3-1: SerialNumber: syz [ 528.726294][ T5615] usb 3-1: config 0 descriptor?? [ 528.837929][ T5615] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 529.065446][ T5615] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 529.108827][ T5615] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 529.152725][T10475] @0Ù: renamed from bond_slave_1 (while UP) [ 530.310053][T10487] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 530.399869][ T5722] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 530.468208][T10491] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 530.499398][T10491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1265'. [ 530.562084][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 530.581441][ T5722] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 530.749867][ T5722] usb 1-1: config 0 has no interface number 0 [ 530.761081][ T5722] usb 1-1: config 0 interface 30 has no altsetting 0 [ 530.774911][ T5722] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 530.790213][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.805852][ T5722] usb 1-1: Product: syz [ 530.822884][ T5722] usb 1-1: Manufacturer: syz [ 530.833721][ T5722] usb 1-1: SerialNumber: syz [ 530.848722][ T5722] usb 1-1: config 0 descriptor?? [ 533.389670][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1273'. [ 533.446831][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1273'. [ 533.489606][T10488] dummy0: left promiscuous mode [ 534.640127][T10491] dummy0: entered promiscuous mode [ 534.664541][ T5722] qmi_wwan 1-1:0.30: probe with driver qmi_wwan failed with error -22 [ 534.762148][ T5722] usb 1-1: USB disconnect, device number 36 [ 534.836785][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 534.845690][ T5615] usb 3-1: USB disconnect, device number 39 [ 534.888120][ T5615] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 534.998424][ T5615] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 535.095462][ T5729] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 535.112112][ T5615] quatech2 3-1:0.51: device disconnected [ 535.367605][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 535.376602][T10528] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 535.851209][ T5729] usb 5-1: device descriptor read/64, error -71 [ 536.184706][ T5729] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 536.400085][ T5729] usb 5-1: device descriptor read/64, error -71 [ 536.629355][ T5729] usb usb5-port1: attempt power cycle [ 537.112497][ T5729] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 537.213314][ T5729] usb 5-1: device descriptor read/8, error -71 [ 537.501592][ T5729] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 537.575977][ T5729] usb 5-1: device descriptor read/8, error -71 [ 537.753790][ T5729] usb usb5-port1: unable to enumerate USB device [ 538.056521][T10537] comedi comedi1: Minor 6 could not be opened [ 540.131322][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1287'. [ 540.187437][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1287'. [ 540.323745][T10547] syzkaller0: entered allmulticast mode [ 541.783553][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 541.792488][T10589] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 542.238352][T10595] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 542.317847][T10595] 8021q: adding VLAN 0 to HW filter on device bond10 [ 543.680785][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 544.098144][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1304'. [ 544.415404][ T5714] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 544.819887][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 544.853840][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 545.205009][ T5714] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 545.220622][ T5714] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 545.235376][ T5714] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 545.243883][ T5714] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 545.252296][ T5714] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 545.261528][ T5714] usb 5-1: config 0 has no interface number 0 [ 545.271346][ T5714] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 545.282991][ T5714] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 546.131877][ T5714] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.141950][ T5714] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.155087][ T5714] usb 5-1: config 0 interface 125 has no altsetting 0 [ 546.162018][ T5714] usb 5-1: config 0 interface 125 has no altsetting 2 [ 546.171346][ T5714] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 546.180706][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.188815][ T5714] usb 5-1: Product: syz [ 546.197383][ T5714] usb 5-1: Manufacturer: syz [ 546.202108][ T5714] usb 5-1: SerialNumber: syz [ 546.232715][ T5714] usb 5-1: config 0 descriptor?? [ 546.264620][ T5714] usb 5-1: selecting invalid altsetting 2 [ 546.509351][ C1] usb 5-1: async_complete: urb error -71 [ 546.515126][ C1] usb 5-1: async_complete: urb error -71 [ 546.520866][ C1] usb 5-1: async_complete: urb error -71 [ 546.526567][ C1] usb 5-1: async_complete: urb error -71 [ 546.563035][ T5714] get_1284_register: usb error -71 [ 546.625963][ T5714] usb 5-1: USB disconnect, device number 49 [ 547.029262][ T5729] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 547.261665][ T30] audit: type=1400 audit(1778858545.706:737): avc: denied { mount } for pid=10629 comm="syz.5.1309" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 547.530129][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 547.542530][ T5729] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 547.564742][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.573503][ T5729] usb 3-1: Product: syz [ 547.577756][ T5729] usb 3-1: Manufacturer: syz [ 547.582990][ T5729] usb 3-1: SerialNumber: syz [ 547.592179][ T5729] usb 3-1: config 0 descriptor?? [ 547.605997][ T5729] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 547.635765][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1311'. [ 547.735044][T10638] comedi comedi4: bad chanlist[0]=0x000003ff chan=1023 range length=2 [ 547.906376][ T30] audit: type=1400 audit(1778858546.426:738): avc: denied { unmount } for pid=10225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 548.038504][T10650] netlink: 'syz.5.1316': attribute type 1 has an invalid length. [ 548.273345][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 548.282561][T10653] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 549.097982][ T5729] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 549.124619][ T5729] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 549.152559][ T5729] usb 3-1: USB disconnect, device number 40 [ 549.971146][ T5729] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 550.099633][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1320'. [ 550.111214][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1320'. [ 550.521180][T10660] uprobe: syz.2.1319:10660 failed to unregister, leaking uprobe [ 550.529960][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 550.536884][ T5729] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 550.545229][ T5729] usb 1-1: config 0 has no interface number 0 [ 550.553685][ T5729] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 550.562921][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.571543][ T5729] usb 1-1: Product: syz [ 550.575900][ T5729] usb 1-1: Manufacturer: syz [ 550.580596][ T5729] usb 1-1: SerialNumber: syz [ 550.589556][ T5729] usb 1-1: config 0 descriptor?? [ 550.601070][ T5729] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 550.745884][ T30] audit: type=1400 audit(1778858549.266:739): avc: denied { getopt } for pid=10671 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.150152][ T5729] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 551.212993][ T5729] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 551.250829][ T30] audit: type=1400 audit(1778858549.766:740): avc: denied { kexec_image_load } for pid=10675 comm="syz.4.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 551.590889][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 552.222084][T10688] bond11: (slave veth23): Enslaving as an active interface with an up link [ 552.246058][T10663] dummy0: left promiscuous mode [ 552.259078][T10663] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 552.272491][T10663] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 552.280373][T10663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'. [ 552.289446][T10663] dummy0: entered promiscuous mode [ 552.298311][T10663] bond11: (slave dummy0): Releasing backup interface [ 552.336115][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 552.343978][ T5742] usb 1-1: USB disconnect, device number 37 [ 552.353446][ T5742] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 552.368873][ T5742] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 552.380965][ T5742] quatech2 1-1:0.51: device disconnected [ 552.459868][ T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 552.459877][ T5803] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 552.609873][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 552.616383][ T5803] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 552.625066][ T5803] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.633934][ T5803] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.642176][ T5803] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.643256][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 552.650399][ T5803] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 552.664670][ T5803] usb 3-1: config 0 has no interface number 0 [ 552.667412][ T29] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 552.672576][ T5803] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 552.679130][ T29] usb 5-1: config 0 has no interface number 0 [ 552.690233][ T5803] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 552.698432][ T29] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 552.706161][ T5803] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.715053][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.725148][ T5803] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.733135][ T29] usb 5-1: Product: syz [ 552.749010][ T5803] usb 3-1: config 0 interface 125 has no altsetting 0 [ 552.751235][ T29] usb 5-1: Manufacturer: syz [ 552.759243][ T5803] usb 3-1: config 0 interface 125 has no altsetting 2 [ 552.762471][ T29] usb 5-1: SerialNumber: syz [ 552.772846][ T5803] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 552.783531][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.791792][ T5803] usb 3-1: Product: syz [ 552.792811][ T29] usb 5-1: config 0 descriptor?? [ 552.800149][ T5803] usb 3-1: Manufacturer: syz [ 552.803826][ T29] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 552.805768][ T5803] usb 3-1: SerialNumber: syz [ 552.821470][ T5803] usb 3-1: config 0 descriptor?? [ 552.829137][ T5803] usb 3-1: selecting invalid altsetting 2 [ 552.981943][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 553.010723][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 553.023330][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 553.046848][ C0] usb 3-1: async_complete: urb error -71 [ 553.052623][ C0] usb 3-1: async_complete: urb error -71 [ 553.058336][ C0] usb 3-1: async_complete: urb error -71 [ 553.064030][ C0] usb 3-1: async_complete: urb error -71 [ 553.075332][ T5803] get_1284_register: usb error -71 [ 553.113474][ T5803] usb 3-1: USB disconnect, device number 41 [ 553.229913][ T5742] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 553.381279][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 229, changing to 11 [ 553.393578][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42493, setting to 1024 [ 553.405084][ T5742] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 553.414159][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.426783][ T5742] usb 1-1: config 0 descriptor?? [ 553.438591][T10695] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.456564][T10690] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 553.491266][T10690] dummy0: left promiscuous mode [ 553.501110][T10690] netlink: 'syz.4.1328': attribute type 10 has an invalid length. [ 553.509034][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1328'. [ 553.518441][T10690] dummy0: entered promiscuous mode [ 553.550772][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 553.551196][ T5803] usb 5-1: USB disconnect, device number 50 [ 553.569741][ T5803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 553.586423][ T5803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 553.599773][ T5803] quatech2 5-1:0.51: device disconnected [ 554.282322][ T5742] cm6533_jd 0003:0D8C:0022.0004: unknown global tag 0xd [ 554.293716][ T5742] cm6533_jd 0003:0D8C:0022.0004: item 0 0 1 13 parsing failed [ 554.375851][ T5742] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 554.385710][ T5742] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 554.993080][ T30] audit: type=1400 audit(1778858553.516:741): avc: denied { read } for pid=10718 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.069484][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 555.079663][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 555.223875][ T30] audit: type=1400 audit(1778858553.516:742): avc: denied { read open } for pid=10718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.251223][ T30] audit: type=1400 audit(1778858553.516:743): avc: denied { getattr } for pid=10718 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.215506][ T30] audit: type=1400 audit(1778858554.736:744): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.401999][ T30] audit: type=1400 audit(1778858554.756:745): avc: denied { add_name } for pid=10711 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.626486][ T30] audit: type=1400 audit(1778858554.766:746): avc: denied { create } for pid=10711 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 556.882769][ T30] audit: type=1400 audit(1778858554.766:747): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=6727 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 557.146992][ T30] audit: type=1400 audit(1778858554.766:748): avc: denied { append } for pid=10711 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=6727 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 558.698751][ T30] audit: type=1400 audit(1778858557.206:749): avc: denied { write } for pid=10744 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.787060][ T30] audit: type=1400 audit(1778858557.216:750): avc: denied { remove_name } for pid=10744 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=6727 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.970941][ T29] usb 1-1: USB disconnect, device number 38 [ 559.597273][T10746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.615040][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.796279][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.819866][T10746] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 559.834876][T10746] overlayfs: missing 'lowerdir' [ 559.894985][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.903705][T10774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.915513][T10774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.476931][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 560.595808][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 560.755930][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 560.755948][ T30] audit: type=1400 audit(1778858559.276:753): avc: denied { write } for pid=10757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.373471][T10815] fuse: Unknown parameter 'grou00000000000000000000' [ 561.384550][ T30] audit: type=1400 audit(1778858559.896:754): avc: denied { write } for pid=10809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.736773][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 561.756890][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 562.011738][ T5614] Bluetooth: hci1: command tx timeout [ 562.280273][T10762] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.287487][T10762] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.295854][T10762] bridge_slave_0: entered allmulticast mode [ 562.303414][T10762] bridge_slave_0: entered promiscuous mode [ 562.312256][T10762] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.319416][T10762] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.327372][T10762] bridge_slave_1: entered allmulticast mode [ 562.335416][T10762] bridge_slave_1: entered promiscuous mode [ 562.390493][T10762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.403846][T10762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.469611][T10762] team0: Port device team_slave_0 added [ 562.489436][T10762] team0: Port device team_slave_1 added [ 562.589894][ T29] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 562.602165][T10762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.609292][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.633840][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.642641][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.654153][T10762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.666712][T10762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.673761][T10762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.699863][T10762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.800592][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 562.816838][ T29] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 562.851989][ T29] usb 1-1: config 0 has no interface number 0 [ 562.900120][ T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 562.922682][T10762] hsr_slave_0: entered promiscuous mode [ 562.931362][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.022168][T10847] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1357'. [ 563.399541][T10762] hsr_slave_1: entered promiscuous mode [ 563.408431][ T29] usb 1-1: Product: syz [ 563.419704][ T29] usb 1-1: Manufacturer: syz [ 563.426215][T10762] debugfs: 'hsr0' already exists in 'hsr' [ 563.432801][ T29] usb 1-1: SerialNumber: syz [ 563.439539][T10762] Cannot create hsr debugfs directory [ 563.454377][ T29] usb 1-1: config 0 descriptor?? [ 563.496516][ T29] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 563.546734][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'. [ 563.708072][ T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 563.743038][ T29] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 563.954218][T10859] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1362'. [ 563.959919][ T5714] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 563.964087][T10859] openvswitch: netlink: Message has 16 unknown bytes. [ 564.089953][ T5614] Bluetooth: hci1: command tx timeout [ 564.180318][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 564.206579][ T5714] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 564.223182][ T5714] usb 5-1: config 0 has no interface number 0 [ 564.275903][ T5714] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 564.328337][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.375385][ T5714] usb 5-1: Product: syz [ 564.399405][ T5714] usb 5-1: Manufacturer: syz [ 564.419172][ T5714] usb 5-1: SerialNumber: syz [ 564.439562][ T5714] usb 5-1: config 0 descriptor?? [ 564.465556][ T5714] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 564.555095][T10762] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.572559][T10762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.582312][T10762] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 564.601970][T10762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.624291][T10861] fuse: Unknown parameter 'grou00000000000000000000' [ 564.804256][ T5714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 564.826261][T10762] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.842388][ T5714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 564.842744][T10762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.300043][T10868] dummy0: left promiscuous mode [ 565.339249][T10762] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.376500][T10762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.434416][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 565.434728][ T5742] usb 1-1: USB disconnect, device number 39 [ 565.499618][ T5742] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 565.616950][T10762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.635030][ T5742] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 565.650656][ T5742] quatech2 1-1:0.51: device disconnected [ 565.747129][ T30] audit: type=1400 audit(1778858564.266:755): avc: denied { module_load } for pid=10882 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 565.753203][T10873] bond7: (slave veth15): Enslaving as an active interface with an up link [ 565.979094][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1365'. [ 566.171906][ T5614] Bluetooth: hci1: command tx timeout [ 566.224984][T10762] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.236148][T10856] dummy0: left promiscuous mode [ 566.249224][T10856] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 566.269492][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.273104][T10856] netlink: 'syz.4.1361': attribute type 10 has an invalid length. [ 566.276722][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.284919][T10856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1361'. [ 566.324169][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.331367][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.353926][T10856] dummy0: entered promiscuous mode [ 566.366816][T10856] bond7: (slave dummy0): Releasing backup interface [ 566.453370][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 566.453720][ T5742] usb 5-1: USB disconnect, device number 51 [ 566.497624][ T5742] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 566.497883][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'. [ 566.540398][ T5742] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 566.569181][ T5742] quatech2 5-1:0.51: device disconnected [ 566.605537][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'. [ 566.997545][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 567.014816][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 567.280927][ T5615] libceph: connect (1)[c::]:6789 error -101 [ 567.294750][ T5615] libceph: mon0 (1)[c::]:6789 connect error [ 567.430334][T10900] ceph: No mds server is up or the cluster is laggy [ 568.066988][T10762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.250141][ T5614] Bluetooth: hci1: command tx timeout [ 568.316475][T10923] netlink: 'syz.4.1373': attribute type 3 has an invalid length. [ 568.324333][T10923] netlink: 'syz.4.1373': attribute type 3 has an invalid length. [ 568.341567][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 568.409183][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1373'. [ 568.497439][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1373'. [ 569.638386][T10940] netlink: 5192 bytes leftover after parsing attributes in process `syz.0.1376'. [ 569.725529][T10762] veth0_vlan: entered promiscuous mode [ 569.727621][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 569.737117][T10762] veth1_vlan: entered promiscuous mode [ 569.755456][T10940] nbd: socks must be embedded in a SOCK_ITEM attr [ 569.834195][T10762] veth0_macvtap: entered promiscuous mode [ 569.873055][T10762] veth1_macvtap: entered promiscuous mode [ 569.955791][T10762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.979205][T10762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.262300][ T4314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.291393][ T4314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.465905][ T4314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.491870][ T4314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.499890][ T5615] libceph: connect (1)[c::]:6789 error -101 [ 571.650007][ T5615] libceph: mon0 (1)[c::]:6789 connect error [ 571.749814][T10966] ceph: No mds server is up or the cluster is laggy [ 571.920278][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 571.926436][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 571.959897][ T5615] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 572.170472][ T5615] usb 6-1: Using ep0 maxpacket: 32 [ 572.179917][ T5615] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 572.195352][ T5615] usb 6-1: config 0 has no interface number 0 [ 572.204610][ T5615] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 572.213789][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.222077][ T5615] usb 6-1: Product: syz [ 572.229602][ T5615] usb 6-1: Manufacturer: syz [ 572.236909][ T5615] usb 6-1: SerialNumber: syz [ 572.253514][ T5615] usb 6-1: config 0 descriptor?? [ 572.288044][ T5615] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 572.304081][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.320869][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.377235][T10976] xt_hashlimit: size too large, truncated to 1048576 [ 572.383001][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.392411][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.516936][ T5615] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 572.527271][T10980] fuse: Bad value for 'fd' [ 572.551538][ T5803] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 572.618288][ T5615] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 572.989909][ T5803] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 572.999133][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.019846][ T5803] usb 1-1: Product: syz [ 573.026301][ T5803] usb 1-1: Manufacturer: syz [ 573.053521][ T5803] usb 1-1: SerialNumber: syz [ 573.208544][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1340'. [ 573.312749][T10985] netlink: 'syz.5.1385': attribute type 10 has an invalid length. [ 573.353872][T10985] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1385'. [ 573.373340][T10985] dummy0: entered promiscuous mode [ 573.660098][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 574.168395][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 574.171231][ T5714] usb 6-1: USB disconnect, device number 7 [ 574.183185][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 574.231957][ T5714] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 576.644110][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 577.246485][ T5714] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 577.267792][ T5714] quatech2 6-1:0.51: device disconnected [ 577.274783][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 577.383564][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 577.939040][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 577.949586][ T5803] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 578.078496][T11008] can: request_module (can-proto-4) failed. [ 578.571070][ T5803] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 578.586793][ T5803] usb 1-1: USB disconnect, device number 40 [ 580.380208][ T5832] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 580.707222][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'. [ 581.240118][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 581.268287][ T5832] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 581.277070][ T5832] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 581.285834][ T5832] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 581.299909][ T5832] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 581.361363][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 581.396615][ T5832] usb 5-1: config 0 has no interface number 0 [ 581.439665][ T5832] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 581.439894][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 581.483183][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 581.533460][T11054] ceph: No mds server is up or the cluster is laggy [ 581.554151][ T5832] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 581.652083][ T5832] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 581.679929][ T5832] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.703519][ T5832] usb 5-1: config 0 interface 125 has no altsetting 2 [ 581.718508][ T5832] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 581.736459][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.752509][ T5832] usb 5-1: Product: syz [ 581.762308][ T5832] usb 5-1: Manufacturer: syz [ 581.781678][ T5832] usb 5-1: SerialNumber: syz [ 581.806160][ T5832] usb 5-1: config 0 descriptor?? [ 581.833061][ T5832] usb 5-1: selecting invalid altsetting 2 [ 581.847349][ T5832] uss720 5-1:0.125: probe with driver uss720 failed with error -22 [ 582.049029][ T5729] usb 5-1: USB disconnect, device number 52 [ 582.160110][ T5803] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 582.319858][ T5803] usb 1-1: Using ep0 maxpacket: 32 [ 582.339595][ T5803] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 582.350325][ T5803] usb 1-1: config 0 has no interface number 0 [ 582.359179][ T5803] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 582.370808][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.378902][ T5803] usb 1-1: Product: syz [ 582.386825][ T5803] usb 1-1: Manufacturer: syz [ 582.391737][ T5803] usb 1-1: SerialNumber: syz [ 582.401862][ T5803] usb 1-1: config 0 descriptor?? [ 582.415554][ T5803] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 583.131333][ T5803] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 583.163729][ T5803] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 583.507734][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1411'. [ 583.552380][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1411'. [ 584.287554][T11093] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 584.287577][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'. [ 584.325556][T11090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=11090 comm=syz.4.1413 [ 584.440780][T11093] dummy0: entered promiscuous mode [ 585.065806][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 585.075533][ T988] usb 1-1: USB disconnect, device number 41 [ 585.489708][T11108] capability: warning: `syz.2.1416' uses 32-bit capabilities (legacy support in use) [ 586.110385][ T30] audit: type=1400 audit(1778858583.666:756): avc: denied { accept } for pid=11098 comm="syz.2.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 586.541778][ T988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 586.568444][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 586.718708][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 586.727563][ T988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 586.758139][T11109] ceph: No mds server is up or the cluster is laggy [ 587.417875][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 587.500089][ T5714] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 588.559868][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 588.580934][ T988] quatech2 1-1:0.51: device disconnected [ 588.879970][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 588.903052][ T5714] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 588.912753][ T5714] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 588.923480][ T5714] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 588.933556][ T5714] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 589.395599][ T5714] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 589.412397][T11131] fuse: Unknown parameter 'user_i00000000000000000000' [ 589.414085][ T5714] usb 6-1: config 0 has no interface number 0 [ 589.438048][ T5714] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 589.458186][ T5714] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 589.486420][ T5714] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 589.508288][ T5714] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.523244][ T5714] usb 6-1: config 0 interface 125 has no altsetting 0 [ 589.538358][ T5714] usb 6-1: config 0 interface 125 has no altsetting 2 [ 589.557528][ T5714] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 589.567222][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.575646][ T5714] usb 6-1: Product: syz [ 589.580145][ T5714] usb 6-1: Manufacturer: syz [ 589.594173][ T5714] usb 6-1: SerialNumber: syz [ 589.714172][ T5714] usb 6-1: config 0 descriptor?? [ 589.738958][ T5714] usb 6-1: can't set config #0, error -71 [ 589.751895][ T5714] usb 6-1: USB disconnect, device number 8 [ 589.789914][ T5729] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 589.914340][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1426'. [ 589.928406][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1426'. [ 590.469870][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 590.478059][ T5729] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 590.503007][ T5729] usb 1-1: config 0 has no interface number 0 [ 590.512855][ T5729] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 590.512920][T11148] netlink: 'syz.6.1430': attribute type 1 has an invalid length. [ 590.529859][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.550606][ T5729] usb 1-1: Product: syz [ 590.550750][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 590.556275][ T5729] usb 1-1: Manufacturer: syz [ 590.565948][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1430'. [ 590.579837][ T5729] usb 1-1: SerialNumber: syz [ 590.594213][ T5729] usb 1-1: config 0 descriptor?? [ 590.615407][ T5729] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 590.743836][ T30] audit: type=1400 audit(1778858589.266:757): avc: denied { map } for pid=11151 comm="syz.5.1431" path="socket:[31195]" dev="sockfs" ino=31195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 590.827374][ T30] audit: type=1400 audit(1778858589.296:758): avc: denied { accept } for pid=11151 comm="syz.5.1431" path="socket:[31195]" dev="sockfs" ino=31195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 590.873204][ T5729] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 590.912472][ T5729] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 590.929953][ T30] audit: type=1400 audit(1778858589.346:759): avc: denied { getopt } for pid=11151 comm="syz.5.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.059963][T11154] fuse: Bad value for 'user_id' [ 591.077902][T11154] fuse: Bad value for 'user_id' [ 591.420902][T11160] tipc: Started in network mode [ 591.451861][T11160] tipc: Node identity 4, cluster identity 4711 [ 591.465857][T11160] tipc: Node number set to 4 [ 591.573350][T11166] netlink: 'syz.0.1425': attribute type 10 has an invalid length. [ 591.611714][T11164] dummy0: left promiscuous mode [ 591.636960][T11166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1425'. [ 591.713929][T11166] dummy0: entered promiscuous mode [ 591.845737][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 591.854129][ T5729] usb 1-1: USB disconnect, device number 42 [ 591.869873][ T29] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 591.905443][ T5729] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 591.933165][ T5729] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 591.949432][ T5729] quatech2 1-1:0.51: device disconnected [ 592.120133][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 592.173427][ T29] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 592.263833][ T29] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.323296][T11170] xt_ecn: cannot match TCP bits for non-tcp packets [ 592.346045][ T29] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.355755][ T29] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 592.364148][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 592.375254][ T29] usb 5-1: config 0 has no interface number 0 [ 592.384046][ T29] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 592.395365][ T29] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 592.414170][ T29] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.426533][ T29] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.441145][ T29] usb 5-1: config 0 interface 125 has no altsetting 0 [ 592.447991][ T29] usb 5-1: config 0 interface 125 has no altsetting 2 [ 592.492366][ T29] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 592.505017][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.534031][ T29] usb 5-1: Product: syz [ 592.540018][ T29] usb 5-1: Manufacturer: syz [ 592.544792][ T29] usb 5-1: SerialNumber: syz [ 592.565694][ T29] usb 5-1: config 0 descriptor?? [ 592.577256][ T29] usb 5-1: selecting invalid altsetting 2 [ 592.741479][T11178] bridge0: entered allmulticast mode [ 592.779740][ C1] usb 5-1: async_complete: urb error -71 [ 592.785508][ C1] usb 5-1: async_complete: urb error -71 [ 592.791247][ C1] usb 5-1: async_complete: urb error -71 [ 592.796982][ C1] usb 5-1: async_complete: urb error -71 [ 592.806076][ T29] get_1284_register: usb error -71 [ 592.865961][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 592.880620][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 592.950440][ T5714] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 593.360104][ T29] usb 5-1: USB disconnect, device number 53 [ 593.500226][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 593.510492][ T5714] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 593.528322][ T5714] usb 6-1: config 0 has no interface number 0 [ 593.544300][ T5714] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 593.558174][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.593952][T11190] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1444'. [ 593.661686][ T5714] usb 6-1: Product: syz [ 593.681164][ T5714] usb 6-1: Manufacturer: syz [ 593.700308][ T5617] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 593.717554][ T5714] usb 6-1: SerialNumber: syz [ 593.761172][ T5714] usb 6-1: config 0 descriptor?? [ 593.768046][T11193] fuse: Bad value for 'fd' [ 593.788873][ T5714] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 593.903518][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 593.944208][ T5617] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 593.961661][ T5617] usb 1-1: config 0 has no interface number 0 [ 594.063487][ T5617] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 594.091403][ T5714] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 594.156287][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.187219][ T5617] usb 1-1: Product: syz [ 594.222496][ T5617] usb 1-1: Manufacturer: syz [ 594.250827][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 594.259716][T11207] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 594.385333][ T5617] usb 1-1: SerialNumber: syz [ 594.386072][ T988] libceph: connect (1)[c::]:6789 error -101 [ 594.442012][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 594.570469][ T5614] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 594.570646][T10227] Bluetooth: hci5: command 0x206a tx timeout [ 594.623224][ T5714] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 594.648408][ T5617] usb 1-1: config 0 descriptor?? [ 594.720341][ T988] libceph: connect (1)[c::]:6789 error -101 [ 594.725177][ T5617] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 594.767691][ T988] libceph: mon0 (1)[c::]:6789 connect error [ 594.825237][T11176] netlink: 'syz.5.1439': attribute type 1 has an invalid length. [ 594.975209][ T5617] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 594.997358][T11205] ceph: No mds server is up or the cluster is laggy [ 595.033667][ T5617] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 595.089715][T11176] netlink: 'syz.5.1439': attribute type 10 has an invalid length. [ 595.151899][T11176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1439'. [ 595.254713][T11214] bond1: (slave veth3): Enslaving as an active interface with an up link [ 595.306659][T11215] dummy0: left promiscuous mode [ 595.419975][T11215] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 595.432398][T11176] dummy0: entered promiscuous mode [ 595.466817][T11176] bond1: (slave dummy0): Releasing backup interface [ 595.640051][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 595.640517][ T988] usb 6-1: USB disconnect, device number 9 [ 595.690681][ T988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 595.739245][ T988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 595.743892][T11222] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 595.779300][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1442'. [ 595.822979][ T988] quatech2 6-1:0.51: device disconnected [ 595.951822][T11221] dummy0: left promiscuous mode [ 596.046257][T11222] dummy0: entered promiscuous mode [ 596.170063][T10227] Bluetooth: hci3: command 0x0406 tx timeout [ 596.176107][T10774] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 596.259550][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 596.270783][ T988] usb 1-1: USB disconnect, device number 43 [ 596.328295][ T988] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 596.377364][ T988] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 596.574873][ T988] quatech2 1-1:0.51: device disconnected [ 598.831233][T11238] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1456'. [ 599.324996][T11243] fuse: Bad value for 'fd' [ 599.414836][T11245] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1457'. [ 599.596976][T11247] 9pnet_fd: p9_fd_create_unix (11247): problem connecting socket: ./cgroup: -111 [ 599.690696][ T5714] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 599.922184][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 600.055370][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'. [ 600.789245][ T5714] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 600.834485][ T5714] usb 5-1: config 0 has no interface number 0 [ 600.855021][ T5714] usb 5-1: config 0 interface 30 has no altsetting 0 [ 600.885485][ T5714] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 600.914938][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.932460][ T5714] usb 5-1: Product: syz [ 600.956081][ T5714] usb 5-1: Manufacturer: syz [ 600.971891][ T5714] usb 5-1: SerialNumber: syz [ 601.005993][ T5714] usb 5-1: config 0 descriptor?? [ 602.863893][T10227] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 602.870367][T10774] Bluetooth: hci4: command 0x0406 tx timeout [ 602.958065][ T5714] qmi_wwan 5-1:0.30: probe with driver qmi_wwan failed with error -22 [ 603.013816][ T5714] usb 5-1: USB disconnect, device number 54 [ 603.465222][T11284] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1468'. [ 603.568466][T11286] tmpfs: Bad value for 'mpol' [ 604.164354][T11290] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1472'. [ 604.384486][T11294] fuse: Bad value for 'fd' [ 604.590491][ T5803] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 604.765250][ T5803] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 604.782953][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.806116][ T5803] usb 5-1: Product: syz [ 604.821836][ T5803] usb 5-1: Manufacturer: syz [ 604.831365][ T5803] usb 5-1: SerialNumber: syz [ 604.949888][ T988] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 605.061986][ T5803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 605.078293][ T5803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 605.091160][ T5803] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 605.105202][ T5803] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 605.110548][ T5714] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 605.113314][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 605.128715][T11299] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 605.131248][ T988] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 605.136583][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 605.156320][ T988] usb 6-1: config 0 has no interface number 0 [ 605.173879][ T988] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 605.183547][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.191725][ T988] usb 6-1: Product: syz [ 605.196058][ T988] usb 6-1: Manufacturer: syz [ 605.202930][ T988] usb 6-1: SerialNumber: syz [ 605.212017][ T988] usb 6-1: config 0 descriptor?? [ 605.231818][ T988] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 605.303022][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 605.312102][ T5714] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 605.320439][ T5714] usb 1-1: config 0 has no interface number 0 [ 605.326620][ T5714] usb 1-1: config 0 interface 30 has no altsetting 0 [ 605.335612][ T5714] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 605.346274][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.354297][ T5714] usb 1-1: Product: syz [ 605.358482][ T5714] usb 1-1: Manufacturer: syz [ 605.363113][ T5714] usb 1-1: SerialNumber: syz [ 605.371676][ T5714] usb 1-1: config 0 descriptor?? [ 605.438732][ T988] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 605.455278][ T988] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 605.510033][ T5803] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 605.659895][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 605.677470][ T5803] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 605.696706][ T5803] usb 3-1: config 0 has no interface number 0 [ 605.714343][ T5803] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 605.723994][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.732550][ T5803] usb 3-1: Product: syz [ 605.737566][ T5803] usb 3-1: Manufacturer: syz [ 605.748131][ T5803] usb 3-1: SerialNumber: syz [ 605.756101][ T5803] usb 3-1: config 0 descriptor?? [ 605.765104][ T5803] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 606.756463][T11322] netlink: 'syz.5.1477': attribute type 1 has an invalid length. [ 606.852017][ T5803] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 606.866195][ T5803] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 607.521892][T11329] netlink: 'syz.5.1477': attribute type 10 has an invalid length. [ 607.606183][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1477'. [ 607.656200][T11324] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 607.869862][ T5722] usb 5-1: USB disconnect, device number 55 [ 607.919330][T11317] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 607.989053][ T5714] qmi_wwan 1-1:0.30: probe with driver qmi_wwan failed with error -22 [ 607.999208][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1481'. [ 608.075430][ T5714] usb 1-1: USB disconnect, device number 44 [ 608.151797][T11328] dummy0: left promiscuous mode [ 608.165551][T11328] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 608.294761][T11341] overlay: Unknown parameter 'measure' [ 608.853555][T11344] fuse: Bad value for 'fd' [ 608.877545][T11330] bond11: (slave veth23): Enslaving as an active interface with an up link [ 608.888015][T11329] dummy0: entered promiscuous mode [ 608.906586][T11329] bond2: (slave dummy0): Releasing backup interface [ 608.931135][T11332] dummy0: left promiscuous mode [ 608.952453][T11332] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 608.961471][T11334] veth1_to_bridge: entered allmulticast mode [ 608.968774][T11334] bridge0: port 3(veth1_to_bridge) entered blocking state [ 609.034687][T11334] bridge0: port 3(veth1_to_bridge) entered disabled state [ 609.053899][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 609.054411][ T29] usb 6-1: USB disconnect, device number 10 [ 609.071295][T11334] veth1_to_bridge: entered promiscuous mode [ 609.092186][T11334] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.096713][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 609.117148][T11334] bridge0: port 3(veth1_to_bridge) entered blocking state [ 609.124351][T11334] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 609.186842][T11350] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 609.200652][ T30] audit: type=1400 audit(1778858607.706:760): avc: denied { mount } for pid=11347 comm="syz.0.1487" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 609.229103][T11317] dummy0: entered promiscuous mode [ 609.280150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.292608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.298886][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 609.305039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.328176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.340681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.353129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.365608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.378018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.390263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.417190][ T29] quatech2 6-1:0.51: device disconnected [ 609.493588][T11350] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 609.505988][T11350] overlayfs: failed to look up (tracing) for ino (-66) [ 610.069808][ C0] net_ratelimit: 2648 callbacks suppressed [ 610.069826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.087849][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.100056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.112243][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.124413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.136584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.148742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.160935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.173102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.185316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 610.580550][T11317] bond11: (slave dummy0): Releasing backup interface [ 610.775884][ T30] audit: type=1400 audit(1778858609.296:761): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 611.362822][ T5722] usb 3-1: USB disconnect, device number 42 [ 611.371315][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 611.514965][T11365] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 611.651803][ T5722] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 611.712310][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 611.791737][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 612.478376][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 612.487328][T11374] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 612.529723][ T5722] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 612.759869][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 612.941005][ T5722] quatech2 3-1:0.51: device disconnected [ 613.076394][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 613.564901][ T29] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 614.658308][ T29] usb 7-1: config 0 has no interface number 0 [ 615.079958][ C0] net_ratelimit: 18943 callbacks suppressed [ 615.079977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.098056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.110199][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.122327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.134469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.146652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.158790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.170928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.183055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.195159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.756083][ T29] usb 7-1: string descriptor 0 read error: -71 [ 615.866315][T11383] fuse: Bad value for 'fd' [ 615.887681][ T29] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 615.977536][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.518010][ T29] usb 7-1: config 0 descriptor?? [ 616.523823][ T29] usb 7-1: can't set config #0, error -71 [ 616.531954][ T29] usb 7-1: USB disconnect, device number 2 [ 616.598621][T11365] 8021q: adding VLAN 0 to HW filter on device bond12 [ 616.709228][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 619.821625][T11408] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1502'. [ 620.089809][ C0] net_ratelimit: 17300 callbacks suppressed [ 620.089824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.107829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.120069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.132278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.144418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.156549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.168683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.180819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.192944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 620.205068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.414265][T11410] capability: warning: `syz.4.1503' uses deprecated v2 capabilities in a way that may be insecure [ 622.567560][T11423] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1507'. [ 622.859463][T11430] pim6reg1: entered promiscuous mode [ 622.989608][ T30] audit: type=1400 audit(1778858621.506:762): avc: denied { connect } for pid=11428 comm="syz.4.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 622.991799][T11430] pim6reg1: entered allmulticast mode [ 623.089849][ T5722] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 623.151158][T11435] fuse: Bad value for 'fd' [ 623.274733][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 623.295074][ T5722] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 623.313481][ T5722] usb 6-1: config 0 has no interface number 0 [ 623.341901][ T5722] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 623.368263][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.417171][ T5722] usb 6-1: Product: syz [ 623.436714][ T5722] usb 6-1: Manufacturer: syz [ 623.450899][ T5722] usb 6-1: SerialNumber: syz [ 623.469014][ T5722] usb 6-1: config 0 descriptor?? [ 623.486138][ T5722] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 623.693916][ T5722] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 623.722091][ T5722] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 624.072280][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.175423][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1509'. [ 624.329810][T11443] netlink: 'syz.5.1509': attribute type 10 has an invalid length. [ 624.370683][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1509'. [ 625.099913][ C0] net_ratelimit: 15571 callbacks suppressed [ 625.099928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.118048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.130351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.142597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.154844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.167106][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.179360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.191541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.204501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.216742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 626.514966][ C0] sched: DL replenish lagged too much [ 629.445526][T11442] dummy0: left promiscuous mode [ 629.524901][T11443] dummy0: entered promiscuous mode [ 629.853138][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1515'. [ 630.021051][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1515'. [ 630.109827][ C0] net_ratelimit: 16271 callbacks suppressed [ 630.109845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.128879][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.141978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.155030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.168145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.181159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.190716][ T30] audit: type=1400 audit(1778858628.706:763): avc: denied { setopt } for pid=11466 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 630.194157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.225568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.239247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.252307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 630.480042][ T5722] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 630.660446][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 630.675069][ T5722] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 630.711925][ T5722] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 630.755351][ T5722] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 630.777260][T11474] fuse: Invalid rootmode [ 630.787513][ T5722] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 630.816114][ T5722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 630.852046][ T5722] usb 1-1: config 0 has no interface number 0 [ 630.880052][ T5722] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 630.938983][ T5722] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 630.992324][ T5722] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 631.211967][ T5614] Bluetooth: hci5: command 0x206a tx timeout [ 631.246497][ T5722] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.286864][ T5722] usb 1-1: config 0 interface 125 has no altsetting 0 [ 631.304220][ T5722] usb 1-1: config 0 interface 125 has no altsetting 2 [ 631.322710][ T5722] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 631.361362][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.394367][ T5722] usb 1-1: Product: syz [ 631.414749][ T5722] usb 1-1: Manufacturer: syz [ 631.425068][T11478] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1522'. [ 631.444322][ T5722] usb 1-1: SerialNumber: syz [ 631.485039][ T5722] usb 1-1: config 0 descriptor?? [ 631.506059][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 631.537274][ T5722] usb 1-1: selecting invalid altsetting 2 [ 631.553810][ T5617] usb 6-1: USB disconnect, device number 11 [ 631.660879][ T5617] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 631.786055][ C1] usb 1-1: async_complete: urb error -71 [ 631.791808][ C1] usb 1-1: async_complete: urb error -71 [ 631.797530][ C1] usb 1-1: async_complete: urb error -71 [ 631.803240][ C1] usb 1-1: async_complete: urb error -71 [ 631.812232][ T5617] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 631.885326][ T5722] get_1284_register: usb error -71 [ 632.523182][ T5617] quatech2 6-1:0.51: device disconnected [ 632.540996][ T5722] usb 1-1: USB disconnect, device number 45 [ 635.120145][ C0] net_ratelimit: 5868 callbacks suppressed [ 635.120159][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.138516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.151019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.163519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.180482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.193075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.205614][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.218131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.230712][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.243252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.130082][ C0] net_ratelimit: 7697 callbacks suppressed [ 640.130104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.149149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.162343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.175569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.188782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.202042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.214733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.228857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.241443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.254065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.575939][T11493] can: request_module (can-proto-4) failed. [ 645.140931][ C0] net_ratelimit: 5675 callbacks suppressed [ 645.140951][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.160519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.174372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.187117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.200017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.213284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.225889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.238754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.251466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.264043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.150031][ C0] net_ratelimit: 5221 callbacks suppressed [ 650.150048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.168525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.181122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.193672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.206254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.218852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.231392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.243955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.256509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 650.269308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 652.915231][T11520] tmpfs: Bad value for 'mpol' [ 653.885634][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 653.901653][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 653.913095][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 653.950535][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 653.968211][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 654.023234][T11527] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 655.153640][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1533'. [ 655.162686][ C0] net_ratelimit: 4220 callbacks suppressed [ 655.162698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.163427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.164120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.164802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.165511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.166211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.166894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.167672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.168916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 655.170059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 656.010203][T10774] Bluetooth: hci6: command tx timeout [ 657.930162][ T5614] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 658.090120][ T5614] Bluetooth: hci6: command tx timeout [ 660.170091][ T5614] Bluetooth: hci6: command tx timeout [ 660.170677][ C0] net_ratelimit: 8270 callbacks suppressed [ 660.170692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.193856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.206364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.218862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.231361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.243861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.256511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.269015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.281509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.294063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 662.486857][ T5614] Bluetooth: hci6: command tx timeout [ 664.144545][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 664.500392][T11527] 8021q: adding VLAN 0 to HW filter on device bond12 [ 665.180831][ C0] net_ratelimit: 6864 callbacks suppressed [ 665.180850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.199305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.211862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.224403][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.236942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.249465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.261980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.274500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.287013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 665.299532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 666.095700][T11537] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 670.189858][ C0] net_ratelimit: 7193 callbacks suppressed [ 670.189872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.208249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.220797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.233320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.245830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.258508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.271027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.283521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.296078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 670.308594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.200165][ C0] net_ratelimit: 7914 callbacks suppressed [ 675.200184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.219266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.231971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.244750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.257999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.270529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.283010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.295500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.307996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 675.320520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.209877][ C0] net_ratelimit: 6946 callbacks suppressed [ 680.209892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.228280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.240814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.253350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.265854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.278352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.290878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.303376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.315883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 680.328419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 681.269134][T10027] NFSD: Failed to start, no listeners configured. [ 683.076390][T10227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.103611][T10227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.202497][T10227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.263240][T10227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.282142][T10227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.289714][T10227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.403924][T10227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.413431][T10227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.480053][T10227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.502820][T10227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.969126][T10774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 684.132928][T10774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 684.180256][T10774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 684.414653][T10774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 684.473837][T10774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 685.219831][ C0] net_ratelimit: 6410 callbacks suppressed [ 685.219850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.238161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.250638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.263137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.275645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.288136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.300846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.313345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.326255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.338773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.364203][T10227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 685.372417][T10227] Bluetooth: hci0: command tx timeout [ 685.457089][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.530008][T10227] Bluetooth: hci1: command tx timeout [ 685.767949][T10227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 685.937337][T10227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 685.948405][T10227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 685.961268][T10227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 686.570076][T10227] Bluetooth: hci4: command tx timeout [ 686.709468][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.451432][T10227] Bluetooth: hci0: command tx timeout [ 687.610248][T10227] Bluetooth: hci1: command tx timeout [ 688.010165][T10227] Bluetooth: hci7: command tx timeout [ 688.649897][T10227] Bluetooth: hci4: command tx timeout [ 689.530874][T10227] Bluetooth: hci0: command tx timeout [ 689.689855][T10227] Bluetooth: hci1: command tx timeout [ 689.918568][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.091270][T10227] Bluetooth: hci7: command tx timeout [ 690.230271][ C0] net_ratelimit: 7202 callbacks suppressed [ 690.230292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.249110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.262152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.275168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.288118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.301137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.314008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.327508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.340863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.353894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 690.507544][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.729879][T10227] Bluetooth: hci4: command tx timeout [ 691.611062][T10227] Bluetooth: hci0: command tx timeout [ 691.698992][ T12] veth1_to_bridge: left promiscuous mode [ 691.715997][ T12] bridge0: port 3(veth1_to_bridge) entered disabled state [ 691.734666][ T12] bridge_slave_1: left allmulticast mode [ 691.740408][ T12] bridge_slave_1: left promiscuous mode [ 691.749355][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.763050][ T12] bridge_slave_0: left allmulticast mode [ 691.768720][ T12] bridge_slave_0: left promiscuous mode [ 691.774511][T10227] Bluetooth: hci1: command tx timeout [ 691.780420][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.905608][ T30] audit: type=1400 audit(1778858690.426:764): avc: denied { write } for pid=11618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.989549][ T30] audit: type=1400 audit(1778858690.506:765): avc: denied { write } for pid=11629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.089067][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.103986][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.113920][ T12] bond0 (unregistering): Released all slaves [ 692.123346][ T12] bond1 (unregistering): Released all slaves [ 692.138239][ T12] bond2 (unregistering): Released all slaves [ 692.150085][ T12] bond3 (unregistering): Released all slaves [ 692.168324][ T12] bond4 (unregistering): Released all slaves [ 692.180238][T10227] Bluetooth: hci7: command tx timeout [ 692.186228][ T12] bond5 (unregistering): (slave veth9): Releasing active interface [ 692.203755][ T12] bond5 (unregistering): Released all slaves [ 692.218314][ T12] bond6 (unregistering): Released all slaves [ 692.231309][ T12] bond7 (unregistering): (slave veth15): Releasing backup interface [ 692.241250][ T12] bond7 (unregistering): Released all slaves [ 692.303316][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 692.792026][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.799237][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.809859][T10227] Bluetooth: hci4: command tx timeout [ 692.815552][T11521] bridge_slave_0: entered allmulticast mode [ 692.831711][T11521] bridge_slave_0: entered promiscuous mode [ 692.899335][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.924839][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.933216][T11521] bridge_slave_1: entered allmulticast mode [ 692.941231][T11521] bridge_slave_1: entered promiscuous mode [ 693.028747][ T30] audit: type=1400 audit(1778858691.546:766): avc: denied { write } for pid=11647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.108881][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.129733][ T30] audit: type=1400 audit(1778858691.646:767): avc: denied { write } for pid=11665 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.132813][T11565] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.167806][T11565] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.175292][T11565] bridge_slave_0: entered allmulticast mode [ 693.183585][T11565] bridge_slave_0: entered promiscuous mode [ 693.193119][T11565] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.202069][T11565] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.209284][T11565] bridge_slave_1: entered allmulticast mode [ 693.218614][T11565] bridge_slave_1: entered promiscuous mode [ 693.264279][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.279406][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 693.345338][ T12] hsr_slave_0: left promiscuous mode [ 693.351203][ T12] hsr_slave_1: left promiscuous mode [ 693.356977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.365410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.373276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.380695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.389731][ T12] veth1_macvtap: left promiscuous mode [ 693.397131][ T12] veth0_macvtap: left promiscuous mode [ 693.403899][ T12] veth1_vlan: left promiscuous mode [ 693.409201][ T12] veth0_vlan: left promiscuous mode [ 693.613960][ T12] team_slave_1 (unregistering): left allmulticast mode [ 693.621333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 693.634720][ T12] team_slave_0 (unregistering): left allmulticast mode [ 693.649592][ T12] team0 (unregistering): Port device team_slave_0 removed [ 693.724297][ T12] team0 (unregistering): left allmulticast mode [ 693.751374][T11565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.790897][T11566] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.798031][T11566] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.805343][T11566] bridge_slave_0: entered allmulticast mode [ 693.812547][T11566] bridge_slave_0: entered promiscuous mode [ 693.829662][T11521] team0: Port device team_slave_0 added [ 693.845270][T11565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.897042][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.904198][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.911611][T11570] bridge_slave_0: entered allmulticast mode [ 693.919525][T11570] bridge_slave_0: entered promiscuous mode [ 693.927020][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.935295][T11566] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.942658][T11566] bridge_slave_1: entered allmulticast mode [ 693.950230][T11566] bridge_slave_1: entered promiscuous mode [ 693.968395][T11521] team0: Port device team_slave_1 added [ 693.984795][T11565] team0: Port device team_slave_0 added [ 693.990511][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.998049][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.005263][T11570] bridge_slave_1: entered allmulticast mode [ 694.012227][T11570] bridge_slave_1: entered promiscuous mode [ 694.042758][T11566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.062208][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.069355][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.076636][T11576] bridge_slave_0: entered allmulticast mode [ 694.085808][T11576] bridge_slave_0: entered promiscuous mode [ 694.094238][T11565] team0: Port device team_slave_1 added [ 694.120444][T11566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.132491][T11570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.148927][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.156126][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.186737][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.199213][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.206362][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.233429][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.245065][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.252450][T10227] Bluetooth: hci7: command tx timeout [ 694.260811][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.268074][T11576] bridge_slave_1: entered allmulticast mode [ 694.275133][T11576] bridge_slave_1: entered promiscuous mode [ 694.312014][T11570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.349228][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.359041][T11565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.366189][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.393038][T11565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.424622][T11570] team0: Port device team_slave_0 added [ 694.432277][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.442083][T11565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.449031][T11565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.475617][T11565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.488391][T11566] team0: Port device team_slave_0 added [ 694.497702][T11566] team0: Port device team_slave_1 added [ 694.519371][T11570] team0: Port device team_slave_1 added [ 694.633607][T11576] team0: Port device team_slave_0 added [ 694.640790][T11566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.647757][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.677538][T11566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.689220][T11570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.698210][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.727322][T11570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.767556][T11521] hsr_slave_0: entered promiscuous mode [ 694.774523][T11521] hsr_slave_1: entered promiscuous mode [ 694.780896][T11521] debugfs: 'hsr0' already exists in 'hsr' [ 694.786648][T11521] Cannot create hsr debugfs directory [ 694.796628][T11576] team0: Port device team_slave_1 added [ 694.804169][T11566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.811355][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.837981][T11566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.857580][T11570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.865362][ T30] audit: type=1400 audit(1778858693.376:768): avc: denied { write } for pid=11674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.888462][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.923582][T11570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.961927][T11565] hsr_slave_0: entered promiscuous mode [ 694.968534][T11565] hsr_slave_1: entered promiscuous mode [ 694.975341][T11565] debugfs: 'hsr0' already exists in 'hsr' [ 694.981668][T11565] Cannot create hsr debugfs directory [ 694.985672][ T30] audit: type=1400 audit(1778858693.506:769): avc: denied { write } for pid=11685 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.076167][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.083259][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.110115][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.156455][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.186815][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 695.194194][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.201370][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.228687][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.248520][T11566] hsr_slave_0: entered promiscuous mode [ 695.254823][T11566] hsr_slave_1: entered promiscuous mode [ 695.261026][T11566] debugfs: 'hsr0' already exists in 'hsr' [ 695.266744][T11566] Cannot create hsr debugfs directory [ 695.348770][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.397004][T11570] hsr_slave_0: entered promiscuous mode [ 695.404958][T11570] hsr_slave_1: entered promiscuous mode [ 695.415069][T11570] debugfs: 'hsr0' already exists in 'hsr' [ 695.420836][T11570] Cannot create hsr debugfs directory [ 695.500778][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.533961][T11576] hsr_slave_0: entered promiscuous mode [ 695.540754][T11576] hsr_slave_1: entered promiscuous mode [ 695.547082][T11576] debugfs: 'hsr0' already exists in 'hsr' [ 695.553603][T11576] Cannot create hsr debugfs directory [ 695.716313][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.825935][ T30] audit: type=1400 audit(1778858694.346:770): avc: denied { write } for pid=11688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.931841][ T30] audit: type=1400 audit(1778858694.426:771): avc: denied { write } for pid=11699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.015235][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 696.407520][T11521] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 696.423419][T11521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.431857][T11521] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.448928][T11521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.457228][T11521] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 696.469940][T11521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.542891][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.567257][T11521] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 696.582443][T11521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.706087][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.758916][ T30] audit: type=1400 audit(1778858695.276:772): avc: denied { write } for pid=11704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.843632][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.856779][ T30] audit: type=1400 audit(1778858695.376:773): avc: denied { write } for pid=11721 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.938461][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.973585][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 697.115846][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.227542][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.245122][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.252283][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.346033][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.353201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.490974][ T30] audit: type=1400 audit(1778858696.016:774): avc: denied { write } for pid=11725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.551413][T11566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.567971][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.624830][ T30] audit: type=1400 audit(1778858696.146:775): avc: denied { write } for pid=11736 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.627714][T11566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.663903][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.728141][T11566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.739302][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.784159][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 697.792574][T11566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 697.809057][T11566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.926884][T11576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 697.945321][T11576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.953194][T11576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 697.963555][T11576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.976690][T11576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 697.988095][T11576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.996210][T11576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 698.009250][T11576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.334757][T11565] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 698.358337][T11565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.415329][T11565] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 698.434937][T11565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.443455][T11565] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 698.457893][T11565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.555091][ T30] audit: type=1400 audit(1778858697.066:776): avc: denied { write } for pid=11759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.595636][T11570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.636671][ T30] audit: type=1400 audit(1778858697.156:777): avc: denied { write } for pid=11774 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.720336][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.739676][T11565] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 698.748616][T11565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.773862][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 698.819707][T11570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.853652][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.891064][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.951611][T11570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.026068][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.056528][T11566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.133698][T11570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.224023][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.293353][T11566] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.406465][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.436332][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.443507][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.465125][ T30] audit: type=1400 audit(1778858697.986:778): avc: denied { write } for pid=11790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.519737][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.526903][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.588608][ T30] audit: type=1400 audit(1778858698.106:779): avc: denied { write } for pid=11801 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.592458][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.721668][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.728836][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.741879][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 699.762088][T11521] veth0_vlan: entered promiscuous mode [ 699.792342][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.799482][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.828595][T11570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 699.837961][T11570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.856569][ T12] bridge_slave_1: left allmulticast mode [ 699.862800][ T12] bridge_slave_1: left promiscuous mode [ 699.868465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.877904][ T12] bridge_slave_0: left allmulticast mode [ 699.886804][ T12] bridge_slave_0: left promiscuous mode [ 699.892845][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.908914][ T12] bridge_slave_1: left allmulticast mode [ 699.916839][ T12] bridge_slave_1: left promiscuous mode [ 699.923304][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.932592][ T12] bridge_slave_0: left allmulticast mode [ 699.938212][ T12] bridge_slave_0: left promiscuous mode [ 699.944411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.956364][ T12] bridge_slave_1: left allmulticast mode [ 699.962030][ T12] bridge_slave_1: left promiscuous mode [ 699.967657][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.978859][ T12] bridge_slave_0: left allmulticast mode [ 699.984528][ T12] bridge_slave_0: left promiscuous mode [ 699.990588][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.003670][ T12] bridge_slave_1: left allmulticast mode [ 700.009293][ T12] bridge_slave_1: left promiscuous mode [ 700.015601][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.027141][ T12] bridge_slave_0: left allmulticast mode [ 700.033148][ T12] bridge_slave_0: left promiscuous mode [ 700.038850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.235172][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.245579][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.256176][ T12] bond0 (unregistering): Released all slaves [ 700.266079][ T12] bond1 (unregistering): (slave veth3): Releasing backup interface [ 700.276133][ T12] bond1 (unregistering): Released all slaves [ 700.288629][ T12] bond2 (unregistering): Released all slaves [ 700.437415][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.449373][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.459427][ T12] bond0 (unregistering): Released all slaves [ 700.470043][ T12] bond1 (unregistering): Released all slaves [ 700.482376][ T12] bond2 (unregistering): Released all slaves [ 700.496934][ T12] bond3 (unregistering): Released all slaves [ 700.511446][ T12] bond4 (unregistering): (slave veth9): Releasing active interface [ 700.522653][ T12] bond4 (unregistering): Released all slaves [ 700.537399][ T12] bond5 (unregistering): Released all slaves [ 700.549317][ T12] bond6 (unregistering): Released all slaves [ 700.561911][ T12] bond7 (unregistering): (slave veth15): Releasing active interface [ 700.573924][ T12] bond7 (unregistering): Released all slaves [ 700.586309][ T12] bond8 (unregistering): (slave veth17): Releasing active interface [ 700.598791][ T12] bond8 (unregistering): Released all slaves [ 700.613269][ T12] bond9 (unregistering): Released all slaves [ 700.625295][ T12] bond10 (unregistering): Released all slaves [ 700.642850][ T12] bond11 (unregistering): (slave veth23): Releasing backup interface [ 700.653887][ T12] bond11 (unregistering): Released all slaves [ 700.667847][ T12] bond12 (unregistering): Released all slaves [ 700.820875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.831294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.841399][ T12] bond0 (unregistering): Released all slaves [ 700.850799][ T12] bond1 (unregistering): Released all slaves [ 700.865493][ T12] bond2 (unregistering): (slave veth7): Releasing active interface [ 700.874641][ T12] bond2 (unregistering): Released all slaves [ 700.886638][ T12] bond3 (unregistering): Released all slaves [ 700.902931][ T12] bond4 (unregistering): (slave veth11): Releasing active interface [ 700.913500][ T12] bond4 (unregistering): Released all slaves [ 700.931414][ T12] bond5 (unregistering): (slave veth13): Releasing active interface [ 700.941111][ T12] bond5 (unregistering): Released all slaves [ 700.954478][ T12] bond6 (unregistering): (slave veth15): Releasing active interface [ 700.963040][ T12] bond6 (unregistering): Released all slaves [ 700.981756][ T12] bond7 (unregistering): Released all slaves [ 700.993853][ T12] bond8 (unregistering): Released all slaves [ 701.005696][ T12] bond9 (unregistering): Released all slaves [ 701.017667][ T12] bond10 (unregistering): Released all slaves [ 701.031097][ T12] bond11 (unregistering): (slave veth23): Releasing backup interface [ 701.040626][ T12] bond11 (unregistering): Released all slaves [ 701.061872][ T12] bond12 (unregistering): Released all slaves [ 701.173106][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.183365][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.194857][ T12] bond0 (unregistering): Released all slaves [ 701.204167][T11570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 701.213868][T11570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.221812][T11570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 701.231385][T11570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.257574][T11570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 701.295396][T11570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.359642][T11521] veth1_vlan: entered promiscuous mode [ 701.541380][ T12] tipc: Left network mode [ 701.573224][T11565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.601817][ T12] tipc: Left network mode [ 701.664964][T11521] veth0_macvtap: entered promiscuous mode [ 701.757909][T11521] veth1_macvtap: entered promiscuous mode [ 701.784398][T11565] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.006800][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.013986][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.060382][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.067539][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.145144][ T30] audit: type=1400 audit(1778858700.666:780): avc: denied { write } for pid=11813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.254491][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.318775][ T30] audit: type=1400 audit(1778858700.836:781): avc: denied { write } for pid=11834 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.429508][T11570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.471434][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 702.485502][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.574962][ T6836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.587608][ T6836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.612411][ T6836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.621701][ T6836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.723407][T11570] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.802732][T11566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.868562][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.875738][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.912450][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.919617][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.026647][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.196358][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.215296][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.305165][ T12] hsr_slave_0: left promiscuous mode [ 703.325619][ T12] hsr_slave_1: left promiscuous mode [ 703.341668][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.355172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.363274][ T30] audit: type=1400 audit(1778858701.886:782): avc: denied { write } for pid=11851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.388770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.390442][ T31] INFO: task syz.3.1296:10593 blocked for more than 144 seconds. [ 703.397946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.404207][ T31] Not tainted syzkaller #0 [ 703.404222][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.404231][ T31] task:syz.3.1296 state:D stack:28008 pid:10593 tgid:10592 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 703.404297][ T31] Call Trace: [ 703.404305][ T31] [ 703.404318][ T31] __schedule+0x1295/0x67a0 [ 703.404377][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 703.404401][ T31] ? find_held_lock+0x2b/0x80 [ 703.461667][ T30] audit: type=1400 audit(1778858701.986:783): avc: denied { write } for pid=5596 comm="syz-executor" path="pipe:[4716]" dev="pipefs" ino=4716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 703.502689][ T31] ? schedule+0x2bf/0x390 [ 703.507067][ T31] schedule+0xdd/0x390 [ 703.511526][ T31] schedule_preempt_disabled+0x13/0x30 [ 703.517019][ T31] __mutex_lock+0xced/0x1b10 [ 703.523228][ T31] ? nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 703.529091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 703.535523][ T31] ? net_generic+0xea/0x2a0 [ 703.543747][ T31] ? net_generic+0xea/0x2a0 [ 703.549503][ T31] ? nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 703.563465][ T31] nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 703.586661][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 703.594077][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 703.604391][ T31] ? bpf_lsm_capable+0x9/0x10 [ 703.609118][ T31] ? security_capable+0x80/0x260 [ 703.616530][ T30] audit: type=1400 audit(1778858702.136:784): avc: denied { write } for pid=11868 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.619650][ T31] genl_rcv_msg+0x560/0x800 [ 703.646522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.652693][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 703.658814][ T31] netlink_rcv_skb+0x159/0x420 [ 703.664244][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.669318][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 703.677975][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 703.683519][ T31] genl_rcv+0x28/0x40 [ 703.687526][ T31] netlink_unicast+0x585/0x850 [ 703.692455][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 703.697767][ T31] netlink_sendmsg+0x8b0/0xda0 [ 703.702645][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.708334][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 703.713327][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.718638][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.723966][ T31] ___sys_sendmsg+0x190/0x1e0 [ 703.728642][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.733871][ T31] ? find_held_lock+0x2b/0x80 [ 703.738541][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 703.745176][ T31] __sys_sendmsg+0x170/0x220 [ 703.750214][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 703.755345][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 703.760902][ T31] do_syscall_64+0x10b/0xf80 [ 703.765538][ T31] ? clear_bhb_loop+0x40/0x90 [ 703.770337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.776229][ T31] RIP: 0033:0x7f2e55f9ce59 [ 703.780972][ T31] RSP: 002b:00007f2e56e30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.789403][ T31] RAX: ffffffffffffffda RBX: 00007f2e56215fa0 RCX: 00007f2e55f9ce59 [ 703.797429][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 703.805511][ T31] RBP: 00007f2e56032d6f R08: 0000000000000000 R09: 0000000000000000 [ 703.813974][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.822012][ T31] R13: 00007f2e56216038 R14: 00007f2e56215fa0 R15: 00007ffe23febfe8 [ 703.830069][ T31] [ 703.833212][ T31] [ 703.833212][ T31] Showing all locks held in the system: [ 703.841244][ T31] 5 locks held by kworker/u8:0/12: [ 703.846363][ T31] #0: ffff88801c6c0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 703.856917][ T31] #1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 703.867039][ T31] #2: ffffffff905f3c88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 703.876475][ T31] #3: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 703.886518][ T31] #4: ffffffff8e7f12e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 703.896742][ T31] 1 lock held by khungtaskd/31: [ 703.901910][ T31] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 703.911969][ T31] 3 locks held by kworker/u8:6/1009: [ 703.917255][ T31] #0: ffff888033930140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 703.928401][ T31] #1: ffffc9000517fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 703.941022][ T31] #2: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 703.950610][ T31] 1 lock held by klogd/4967: [ 703.955198][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 703.965123][ T31] 1 lock held by dhcpcd/5274: [ 703.970056][ T31] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 703.979212][ T31] 2 locks held by getty/5366: [ 703.983949][ T31] #0: ffff888038cdf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 703.993776][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 704.003898][ T31] 2 locks held by syz.1.1136/10027: [ 704.009080][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.017886][ T31] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 704.028031][ T31] 2 locks held by syz.3.1296/10593: [ 704.033273][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.041491][ T31] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 704.051733][ T31] 2 locks held by syz-executor/11521: [ 704.057110][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.065366][ T31] #1: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 704.074691][ T31] 1 lock held by syz-executor/11565: [ 704.079994][ T31] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 704.089404][ T31] 1 lock held by syz-executor/11566: [ 704.095453][ T31] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 704.104618][ T31] 1 lock held by syz-executor/11570: [ 704.109926][ T31] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 704.120465][ T31] 1 lock held by syz-executor/11576: [ 704.125763][ T31] #0: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 704.136164][ T31] [ 704.138517][ T31] ============================================= [ 704.138517][ T31] [ 704.147021][ T31] NMI backtrace for cpu 0 [ 704.147041][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 704.147065][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.147076][ T31] Call Trace: [ 704.147083][ T31] [ 704.147091][ T31] dump_stack_lvl+0x100/0x190 [ 704.147120][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 704.147144][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 704.147169][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 704.147195][ T31] sys_info+0x141/0x190 [ 704.147224][ T31] watchdog+0xcb1/0x1030 [ 704.147254][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 704.147281][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.147312][ T31] ? __kthread_parkme+0x18c/0x230 [ 704.147336][ T31] ? kthread+0x13a/0x450 [ 704.147358][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.147379][ T31] kthread+0x370/0x450 [ 704.147402][ T31] ? __pfx_kthread+0x10/0x10 [ 704.147427][ T31] ret_from_fork+0x72b/0xd50 [ 704.147454][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 704.147482][ T31] ? __switch_to+0x800/0x1100 [ 704.147513][ T31] ? __pfx_kthread+0x10/0x10 [ 704.147539][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.147581][ T31] [ 704.147597][ T31] Sending NMI from CPU 0 to CPUs 1: [ 704.158625][ T12] hsr_slave_0: left promiscuous mode [ 704.161146][ C1] NMI backtrace for cpu 1 [ 704.161159][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 704.161181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.161196][ C1] Workqueue: netns cleanup_net [ 704.161219][ C1] RIP: 0010:mark_lock+0x83/0xa20 [ 704.161244][ C1] Code: 8d 04 80 48 8d 04 c5 60 cb 11 96 4c 89 f1 48 23 48 60 0f 84 03 03 00 00 b8 01 00 00 00 48 8b 54 24 68 65 48 2b 15 75 b4 26 12 <0f> 85 ea 07 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc [ 704.161261][ C1] RSP: 0018:ffffc90000a085c0 EFLAGS: 00000046 [ 704.161275][ C1] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 0000000000000200 [ 704.161286][ C1] RDX: 0000000000000000 RSI: ffff88801dee56a8 RDI: ffff88801dee4a00 [ 704.161298][ C1] RBP: ffffc90000a08660 R08: 0000000000000000 R09: 0000000000000007 [ 704.161309][ C1] R10: 0000000000000007 R11: 0000000000000000 R12: ffff88801dee56a8 [ 704.161321][ C1] R13: ffff88801dee4a00 R14: 0000000000000200 R15: 0000000000000002 [ 704.161332][ C1] FS: 0000000000000000(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 704.161349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.161361][ C1] CR2: 0000563cf2c66da8 CR3: 0000000037d1f000 CR4: 00000000003526f0 [ 704.161373][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 704.161384][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 704.161395][ C1] Call Trace: [ 704.161400][ C1] [ 704.161407][ C1] ? __resched_curr+0xf8/0x3b0 [ 704.161427][ C1] ? __lock_acquire+0x4a5/0x2630 [ 704.161452][ C1] __lock_acquire+0x4a5/0x2630 [ 704.161474][ C1] ? find_held_lock+0x2b/0x80 [ 704.161493][ C1] ? lock_acquire+0x1b1/0x370 [ 704.161516][ C1] lock_acquire+0x1b1/0x370 [ 704.161538][ C1] ? unwind_next_frame+0xbd/0x2090 [ 704.161566][ C1] ? unwind_next_frame+0x3be/0x2090 [ 704.161593][ C1] ? unwind_next_frame+0x3be/0x2090 [ 704.161620][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 704.161641][ C1] unwind_next_frame+0xd1/0x2090 [ 704.161667][ C1] ? unwind_next_frame+0xbd/0x2090 [ 704.161698][ C1] ? kthread+0x370/0x450 [ 704.161720][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 704.161740][ C1] arch_stack_walk+0x94/0xf0 [ 704.161769][ C1] ? kthread+0x370/0x450 [ 704.161792][ C1] stack_trace_save+0x8e/0xc0 [ 704.161814][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 704.161835][ C1] ? __lock_acquire+0x4a5/0x2630 [ 704.161858][ C1] kasan_save_stack+0x30/0x50 [ 704.161874][ C1] ? kasan_save_stack+0x30/0x50 [ 704.161890][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 704.161914][ C1] ? insert_work+0x36/0x230 [ 704.161935][ C1] ? __queue_work+0x9a2/0x1270 [ 704.161957][ C1] ? call_timer_fn+0x19a/0x640 [ 704.161976][ C1] ? __run_timers+0x583/0xaf0 [ 704.161996][ C1] ? run_timer_base+0x114/0x190 [ 704.162016][ C1] ? run_timer_softirq+0x1a/0x50 [ 704.162036][ C1] ? handle_softirqs+0x1ea/0xa00 [ 704.162062][ C1] ? __irq_exit_rcu+0x162/0x210 [ 704.162087][ C1] ? irq_exit_rcu+0x9/0x30 [ 704.162112][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 704.162136][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.162157][ C1] ? vprintk_emit+0x553/0x6b0 [ 704.162174][ C1] ? _printk+0xcf/0x110 [ 704.162190][ C1] ? __netdev_printk+0x25c/0x290 [ 704.162210][ C1] ? netdev_info+0xef/0x127 [ 704.162229][ C1] ? __dev_set_promiscuity.cold+0x71/0x3c2 [ 704.162251][ C1] ? netif_set_promiscuity+0x52/0xf0 [ 704.162278][ C1] ? dev_set_promiscuity+0xb2/0x260 [ 704.162298][ C1] ? hsr_del_port+0x3a1/0x4c0 [ 704.162317][ C1] ? hsr_del_ports+0x30/0xc0 [ 704.162333][ C1] ? hsr_dellink+0x5a/0x90 [ 704.162349][ C1] ? default_device_exit_batch+0x70c/0xc10 [ 704.162369][ C1] ? ops_undo_list+0x363/0xab0 [ 704.162386][ C1] ? cleanup_net+0x499/0x920 [ 704.162404][ C1] ? process_one_work+0xa0e/0x1980 [ 704.162427][ C1] ? worker_thread+0x5ef/0xe50 [ 704.162450][ C1] ? kthread+0x370/0x450 [ 704.162480][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 704.162504][ C1] insert_work+0x36/0x230 [ 704.162527][ C1] __queue_work+0x9a2/0x1270 [ 704.162553][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 704.162577][ C1] call_timer_fn+0x19a/0x640 [ 704.162598][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 704.162619][ C1] ? __run_timers+0x573/0xaf0 [ 704.162639][ C1] ? __run_timers+0x573/0xaf0 [ 704.162660][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 704.162687][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 704.162713][ C1] __run_timers+0x583/0xaf0 [ 704.162737][ C1] ? __pfx___run_timers+0x10/0x10 [ 704.162762][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 704.162787][ C1] run_timer_base+0x114/0x190 [ 704.162812][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 704.162835][ C1] run_timer_softirq+0x1a/0x50 [ 704.162856][ C1] handle_softirqs+0x1ea/0xa00 [ 704.162883][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 704.162910][ C1] ? _raw_spin_unlock+0x28/0x50 [ 704.162930][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 704.162949][ C1] __irq_exit_rcu+0x162/0x210 [ 704.162975][ C1] irq_exit_rcu+0x9/0x30 [ 704.163000][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 704.163023][ C1] [ 704.163029][ C1] [ 704.163035][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.163055][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 704.163073][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 5e 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 d6 58 21 00 48 85 ed 0f 85 27 01 00 00 e8 5d 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 704.163090][ C1] RSP: 0018:ffffc900001175a0 EFLAGS: 00000293 [ 704.163103][ C1] RAX: 0000000000000000 RBX: 0000000000000022 RCX: ffffffff81e7420a [ 704.163115][ C1] RDX: ffff88801dee4a00 RSI: ffffffff81e74214 RDI: ffff88801dee4a00 [ 704.163127][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 704.163138][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000022eb6 [ 704.163149][ C1] R13: 0000000000000200 R14: ffff88801ee92500 R15: ffffc90000117668 [ 704.163164][ C1] ? vprintk_emit+0x66a/0x6b0 [ 704.163181][ C1] ? vprintk_emit+0x674/0x6b0 [ 704.163201][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 704.163217][ C1] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 704.163235][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 704.163260][ C1] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 704.163280][ C1] _printk+0xcf/0x110 [ 704.163297][ C1] ? __pfx__printk+0x10/0x10 [ 704.163315][ C1] ? synchronize_rcu_expedited+0x3c3/0x450 [ 704.163343][ C1] __netdev_printk+0x25c/0x290 [ 704.163362][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.163390][ C1] netdev_info+0xef/0x127 [ 704.163410][ C1] ? __pfx_netdev_info+0x10/0x10 [ 704.163433][ C1] ? synchronize_rcu_expedited+0x3c3/0x450 [ 704.163458][ C1] ? __dev_set_promiscuity+0x19a/0x350 [ 704.163487][ C1] __dev_set_promiscuity.cold+0x71/0x3c2 [ 704.163512][ C1] netif_set_promiscuity+0x52/0xf0 [ 704.163539][ C1] dev_set_promiscuity+0xb2/0x260 [ 704.163559][ C1] hsr_del_port+0x3a1/0x4c0 [ 704.163579][ C1] hsr_del_ports+0x30/0xc0 [ 704.163596][ C1] hsr_dellink+0x5a/0x90 [ 704.163613][ C1] ? __pfx_hsr_dellink+0x10/0x10 [ 704.163629][ C1] default_device_exit_batch+0x70c/0xc10 [ 704.163652][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 704.163674][ C1] ? __pfx___might_resched+0x10/0x10 [ 704.163701][ C1] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 704.163727][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 704.163749][ C1] ops_undo_list+0x363/0xab0 [ 704.163769][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 704.163787][ C1] ? cleanup_net+0x332/0x920 [ 704.163811][ C1] ? idr_destroy+0x62/0x2e0 [ 704.163831][ C1] cleanup_net+0x499/0x920 [ 704.163851][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 704.163873][ C1] ? rcu_is_watching+0x12/0xc0 [ 704.163902][ C1] process_one_work+0xa0e/0x1980 [ 704.163931][ C1] ? __pfx_process_one_work+0x10/0x10 [ 704.163958][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 704.163979][ C1] worker_thread+0x5ef/0xe50 [ 704.164007][ C1] ? kthread+0x13a/0x450 [ 704.164027][ C1] ? __pfx_worker_thread+0x10/0x10 [ 704.164049][ C1] kthread+0x370/0x450 [ 704.164069][ C1] ? __pfx_kthread+0x10/0x10 [ 704.164091][ C1] ret_from_fork+0x72b/0xd50 [ 704.164115][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 704.164138][ C1] ? __switch_to+0x800/0x1100 [ 704.164165][ C1] ? __pfx_kthread+0x10/0x10 [ 704.164187][ C1] ret_from_fork_asm+0x1a/0x30 [ 704.164219][ C1] [ 704.165227][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 704.165241][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 704.165264][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.165276][ T31] Call Trace: [ 704.165283][ T31] [ 704.165291][ T31] dump_stack_lvl+0x100/0x190 [ 704.165322][ T31] vpanic+0x552/0x970 [ 704.165342][ T31] ? __pfx_vpanic+0x10/0x10 [ 704.165362][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 704.165385][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 704.165411][ T31] panic+0xd1/0xe0 [ 704.165430][ T31] ? __pfx_panic+0x10/0x10 [ 704.165453][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 704.165474][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 704.165496][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 704.165518][ T31] ? watchdog.cold+0x1ec/0x234 [ 704.165540][ T31] ? watchdog+0xcc1/0x1030 [ 704.165565][ T31] watchdog.cold+0x1fd/0x234 [ 704.165593][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 704.165618][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.165643][ T31] ? __kthread_parkme+0x18c/0x230 [ 704.165667][ T31] ? kthread+0x13a/0x450 [ 704.165689][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.165712][ T31] kthread+0x370/0x450 [ 704.165734][ T31] ? __pfx_kthread+0x10/0x10 [ 704.165761][ T31] ret_from_fork+0x72b/0xd50 [ 704.165788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 704.165814][ T31] ? __switch_to+0x800/0x1100 [ 704.165845][ T31] ? __pfx_kthread+0x10/0x10 [ 704.165870][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.165912][ T31] [ 704.174799][ T31] Kernel Offset: disabled