last executing test programs: 21m23.424919179s ago: executing program 32 (id=232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(0x0, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r2, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) 18m34.744184035s ago: executing program 33 (id=1016): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x8}}]}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 17m2.751145495s ago: executing program 34 (id=1513): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xb00, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x333}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m11.900854638s ago: executing program 35 (id=1574): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8}) fcntl$lock(r3, 0x7, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x7, 0x279, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000140)) r4 = fsopen(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)=']{-*\'\\\x00', 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 13m52.451985801s ago: executing program 36 (id=2086): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="380000001000390400000000fdecdf350034a500", @ANYRES32=r3, @ANYBLOB="0198060000000000180012800b000100697036677265000008000280040012"], 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) sendto$packet(r0, &(0x7f0000000400)='u8', 0x2, 0x24004085, &(0x7f0000000000)={0x11, 0x88a8, r3, 0x1, 0xfe, 0x6, @broadcast}, 0x14) 13m1.189586053s ago: executing program 9 (id=2277): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000087b000/0x2000)=nil, &(0x7f000056f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000b51000/0x1000)=nil, &(0x7f00005c8000/0x1000)=nil, &(0x7f00000bd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007ce000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xd8e2, 0xc000, 0xfffffffe, 0x20002f5, 0x0, r0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m0.102078528s ago: executing program 9 (id=2282): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) 12m44.914389674s ago: executing program 37 (id=2282): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) 12m39.898539701s ago: executing program 38 (id=2289): r0 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 7m52.093774142s ago: executing program 39 (id=2907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x37}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x8, 0xb, 0x6, 0x0, 0x1, 0xcb02}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0xfffffffffffffffe}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0xa}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0x3}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYRES16, @ANYBLOB="fd4ad4cd3a0dfd9a329cb3f0e844d61575f4d15817dc592bbcd9d13f3fd8de455cebb6e0d4d9f324873b7b714b9a6f441d365df713fc22c848ea6bfaf019623f1c3e2744961f821e3ceea990f5d47a05a1f5715b5d926dc523a01aac36c05e238f3ddae59bb922b3c70474929ce5c2fbca545be9c9a2128667c83cbd4878237e3bde48c6f3ab20e69368972bb4632e12a712ae140d2c15d93d20b8c3c6b82c4e08b1b296d8ed30a1aabdcd79a56933de1dfdeb0a842ad0b488ac79f489c56eb7affa7cda33bbf17de8a6896e663d90648dcb86361f557319d16d83b766bdc5da55a098cd", @ANYBLOB="0200260a05000500040000000a0002"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x4040880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001a00010000000080fbdbdf250a808000000000000000000018001e"], 0x34}}, 0x20000050) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r7, 0x1, 0x70bd26, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000001500)={0x0, 0x1, 0x4, 0x4, 0x112, &(0x7f0000001100)="5d7dce63ea502e785151fac75e778188fcf348f16cf1de2df219d7c8d48fe9f3b2d6319a036b8cf59351ef5313e3ead476039a8587b5ace20ccca62853493664cf7eb644b44f2747855cc1920694d0eb183005e1841043a82fb144691e97ef77174345e81e30289f5699d60ec4a81235f35c73ee67290d30d9881c56edfa959b3bb47d0eb4d484c0e9fe457137b16190dcef8d008a4fffa0b5659ba14c44af9bb9e04c92d32740f6f79d24b889a9c031bacb85bd2798547f30b51f1c71379b7b3691058a51e548f699e935cbd571d344db4a11dfeaf6f016cdaf20cc21ea7c4ff3ba0c78f3869bf14e717c0d965cb70df9b7d64ddbb5e8f0168e7765aa4d2ab561786a03e3cb4443ba4d5b88febba37ba0861225089ce9f21862b883f98134e471341c9fc53a81dbec2483f83a601e838351daef86968f3950c481c6e3bbaf6614dba801207a9d8cad649ba1cea461ca52560e2c77c3ba5dc010dc6ed833bbe56b205fb20c1bc8ac7be28dd2a7ffcb089e4f34ad53d0c95073f8619cd8b7112b9e22a7864cfbe738480852fd4e54d4ddcfb1f4fd7a509fb90014471829b77c5cd0741f1efc1f1a4cb6ff99dcf69353b927c169a6d094ebbbdb09816a0ce7cb9137826ff4327120398f53ed33ba7d84ebc83aef3132b27bc168843faa3980be09e99ee2ec4e7a05cf787fd7e3851aa72c8de4ffefe7080b4479094a4835d0bbaca1721063079b3c4ae3e5d842e9767cd85f61df9c4175af112df84403be8575bc46a8b07934420b8fd807ef2a2ff46786dc7f4aca0b4c881814b0bd6fd6cd0483601acd2b0389fcab42d3a77fe8563798121ee5a0e8b69004c13a990a8fe748bf4821baf97ca63b0bafbbd73ae559bbb7d9b411cca4eb48bac652ab616291f37ddfcfea3719e0c55ca1634b7480c38b872e39a82f3bf9ddf404ef30a64785b8a35b85f5a84ca1982515c1a64eadfaa3958cd556a42e3fc849fefb68b774e60a6bfd6da987d7f8334154b21846131f1cbeeeab71d61e3fa1fac1aca9db2e5019bfa04648a406b77364c0adf5765c9a109af9779e6d3c4e1bba351321242734b5600dd977d21727fe02e29ec1d3f2f6027678263037fb5c1b6c000201497a84f2b26965eb3182896c49fb63c41a7492ca510658879a702459d83ff8d31115ac435a40e8f73d51a63dd78990bd53cb8edafe3a3667a8e0eb7a123ab93851cc120b99117c21c96c2dfa4b511cc398c63262e8455a46c2956698546d673ed0bc193d2decf553d70625c635de494be5c2801477ceb9bf71cea8191521232a2f302f299f63d73ac8aad9868b59a090fe4ba94f0afa69b16c6b07ff5935f2307f8168df0eb5ec8863bff7ec432c8bcd10b73feea9bb311afd58a049a639b54ff1fd244abbe19632bdd10578ea0314aaf82f022de8719443c2f4a670747807c61f2ed8f6e1"}) io_uring_enter(r8, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 3m57.359188985s ago: executing program 5 (id=3742): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x3, &(0x7f0000000000)={0x0}) 3m57.071170749s ago: executing program 5 (id=3743): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x444800) creat(0x0, 0x4c) syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000c00)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6f90}}}, 0xd) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000f40)={0x8, 0x35, 0x1, 0x3}, 0x8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200100, 0x16a) 3m56.661712679s ago: executing program 5 (id=3746): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a01, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xa442}], 0x1, 0xfffff935) 3m55.675417934s ago: executing program 5 (id=3755): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) 3m55.230110017s ago: executing program 5 (id=3763): connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd", 0x83}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {0x0}, {0x0}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m55.030452029s ago: executing program 1 (id=3766): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 3m54.913404814s ago: executing program 5 (id=3767): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x330) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x40) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) msgrcv(r3, 0x0, 0x0, 0x98ce86d7921f6527, 0x2000) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) msgsnd(r3, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r7, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) 3m54.752064088s ago: executing program 1 (id=3768): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') read$sequencer(r2, &(0x7f0000000140)=""/236, 0xec) 3m54.750781002s ago: executing program 7 (id=3769): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fdatasync(r0) 3m54.584504164s ago: executing program 7 (id=3770): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff}) 3m54.555473096s ago: executing program 1 (id=3771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x1, 0x0, @ioapic={0x25000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x0, '\x00', 0x7c}, {0x7, 0x13, 0x4, '\x00', 0xbb}, {0x13, 0xb}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0xfe, 0x9, 0x6, '\x00', 0x2}, {0x8, 0x0, 0x6}, {0x6f, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x8f, 0xf5, '\x00', 0x27}, {0xb8, 0x6, 0x0, '\x00', 0x1}, {0xb, 0x0, 0x3}, {0x1, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0x2, '\x00', 0xf9}, {0xf8, 0x0, 0x3, '\x00', 0x2}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x6d, 0x84, '\x00', 0xff}, {0x3, 0x0, 0xec}, {0x0, 0x6, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x0, 0x80, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x4, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x4a, 0xff, 0x3}]}}) 3m53.937238453s ago: executing program 1 (id=3773): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x4, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3m53.311139932s ago: executing program 7 (id=3776): r0 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x2fb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 3m53.191345053s ago: executing program 1 (id=3777): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2f02, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 3m52.71182233s ago: executing program 7 (id=3780): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) 3m52.558585832s ago: executing program 8 (id=3782): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x7, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 3m52.432974964s ago: executing program 8 (id=3783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x1, 0x0, @ioapic={0x25000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x0, '\x00', 0x7c}, {0x7, 0x13, 0x4, '\x00', 0xbb}, {0x13, 0xb}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0xfe, 0x9, 0x6, '\x00', 0x2}, {0x8, 0x0, 0x6}, {0x6f, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x8f, 0xf5, '\x00', 0x27}, {0xb8, 0x6, 0x0, '\x00', 0x1}, {0xb, 0x0, 0x3}, {0x1, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0x2, '\x00', 0xf9}, {0xf8, 0x0, 0x3, '\x00', 0x2}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x6d, 0x84, '\x00', 0xff}, {0x3, 0x0, 0xec}, {0x0, 0x6, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x0, 0x80, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x4, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x4a, 0xff, 0x3}]}}) 3m52.301978446s ago: executing program 7 (id=3784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 3m52.08091599s ago: executing program 1 (id=3785): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_open_procfs$namespace(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getuid() sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3m52.00831738s ago: executing program 8 (id=3786): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) eventfd2(0xf, 0x800) syz_open_dev$usbfs(0x0, 0x400000076, 0x14301) 3m51.991396417s ago: executing program 7 (id=3787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {0x0, 0x4}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5b}}]}, 0x2c}}, 0x24000000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @isdn={0x22, 0x8, 0x3, 0x9, 0x48}, @xdp={0x2c, 0x4, r2, 0x1c}, @hci={0x1f, 0xffffffffffffffff}, 0xfff9, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='veth0\x00', 0x6, 0x8000000000000000, 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e25, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0xe, 0x30, 0x2, 0x3}, 0x9c) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x3ec0) close_range(r11, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r11, 0x40305652, &(0x7f00000002c0)={0x0, 0x4, 0xfffffffc, 0x0, 0x1ffc, 0x2080, 0x6ae0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xc1, 0x80, 0x6, 0x1, [0x2], [0x80ffff, 0xfffffffa, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x8001], [0x6]}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @local}, 0x10) 3m51.931127596s ago: executing program 8 (id=3788): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xffffff00, 0x0, 0xff], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x9}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m51.871337868s ago: executing program 8 (id=3789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 3m51.751083099s ago: executing program 8 (id=3790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r6, 0x25, 0x0, @void}, 0x10) 3m39.682542219s ago: executing program 40 (id=3762): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close_range(r0, 0xffffffffffffffff, 0x0) 3m39.532724117s ago: executing program 41 (id=3767): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = msgget$private(0x0, 0x330) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x40) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) msgrcv(r3, 0x0, 0x0, 0x98ce86d7921f6527, 0x2000) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) msgsnd(r3, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r7, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) 3m36.767314272s ago: executing program 42 (id=3787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {0x0, 0x4}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5b}}]}, 0x2c}}, 0x24000000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @isdn={0x22, 0x8, 0x3, 0x9, 0x48}, @xdp={0x2c, 0x4, r2, 0x1c}, @hci={0x1f, 0xffffffffffffffff}, 0xfff9, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='veth0\x00', 0x6, 0x8000000000000000, 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e25, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0xe, 0x30, 0x2, 0x3}, 0x9c) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x3ec0) close_range(r11, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r11, 0x40305652, &(0x7f00000002c0)={0x0, 0x4, 0xfffffffc, 0x0, 0x1ffc, 0x2080, 0x6ae0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xc1, 0x80, 0x6, 0x1, [0x2], [0x80ffff, 0xfffffffa, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x8001], [0x6]}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @local}, 0x10) 3m36.666976216s ago: executing program 43 (id=3785): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_open_procfs$namespace(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getuid() sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3m36.531523918s ago: executing program 44 (id=3790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r6, 0x25, 0x0, @void}, 0x10) 2m45.363932388s ago: executing program 9 (id=3793): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m45.115545815s ago: executing program 9 (id=3796): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008800) close_range(r6, 0xffffffffffffffff, 0x0) 2m44.109229667s ago: executing program 9 (id=3799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0xc0000102, 0x0, 0x200000008000}]}) 2m43.243513978s ago: executing program 9 (id=3802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m28.225585055s ago: executing program 45 (id=3802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 24.107462181s ago: executing program 2 (id=5584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x7c2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 23.88367591s ago: executing program 2 (id=5586): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 23.710944692s ago: executing program 2 (id=5589): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 23.464228097s ago: executing program 2 (id=5594): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 23.11551867s ago: executing program 2 (id=5597): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040), 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000400", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000000000000006f4736e5de939cbc"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 22.887750367s ago: executing program 2 (id=5600): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.053014931s ago: executing program 3 (id=5728): r0 = gettid() sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffe) 4.131914246s ago: executing program 4 (id=5735): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140), 0x54}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 4.021072898s ago: executing program 3 (id=5736): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) pipe(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000000)={0x0}) 3.631856868s ago: executing program 3 (id=5738): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000400", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000000000000006f4736e5de939cbc"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2.946356538s ago: executing program 6 (id=5741): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, 0x0, 0x0) 2.69889609s ago: executing program 4 (id=5743): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.632370946s ago: executing program 6 (id=5744): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) 2.46496769s ago: executing program 3 (id=5745): r0 = gettid() sigaltstack(&(0x7f0000000140)={0x0, 0x80000002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffe) 2.446234585s ago: executing program 0 (id=5746): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000000000000021d000007"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.259883948s ago: executing program 4 (id=5747): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.212056883s ago: executing program 6 (id=5748): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000007c0)={0x1d, r2, 0x3, {0x0, 0xff, 0x1}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r2, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 2.164119548s ago: executing program 0 (id=5749): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="46617cacf70eeacdf3a2e72060843f5783faa48a7cfe9368bd7836dc06be64fb3e80e7391a81a6bda5fc265822019983828094c9f8a6d8d7166476742c9f3ee1b49f296e346c7f291741ea5ea60288921427bdc4123c830974de316d65922ef0d3d09d44bb674ce4512a98c44f0c3d1a8f0b56eb9337cedab303248af0eaf5d63fa9f759662afd037a4ab94072ed2b3d41b30f4c33409f655a76e8281b9e790b", 0xa0}, {0x0}], 0x2, 0x100000000000004) 1.670707889s ago: executing program 6 (id=5750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) r3 = fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\x05[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\x80\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6v\x88,@\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xf3J\xf6\xf2\xba\xe7|`#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) fanotify_mark(r3, 0x1, 0x3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mprotect(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0) 1.639006933s ago: executing program 4 (id=5751): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 1.479216502s ago: executing program 3 (id=5752): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140), 0x54}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 1.406998869s ago: executing program 4 (id=5753): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 1.055980931s ago: executing program 0 (id=5754): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 1.054611331s ago: executing program 4 (id=5755): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 722.875261ms ago: executing program 0 (id=5756): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 449.843886ms ago: executing program 6 (id=5757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x29c}]}) 274.278223ms ago: executing program 0 (id=5758): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000000000000021d000007"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 124.526892ms ago: executing program 6 (id=5759): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000007c0)={0x1d, r2, 0x3, {0x0, 0xff, 0x1}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r2, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) fsopen(0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 53.953387ms ago: executing program 3 (id=5760): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) 0s ago: executing program 0 (id=5761): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f18", 0x85}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00'/16, 0x10}) kernel console output (not intermixed with test programs): 2-1: config 0 has no interface number 0 [ 1192.736100][T17665] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1192.736124][T17665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.736181][T17665] usb 2-1: Product: syz [ 1192.736192][T17665] usb 2-1: Manufacturer: syz [ 1192.736203][T17665] usb 2-1: SerialNumber: syz [ 1192.802978][T17665] usb 2-1: config 0 descriptor?? [ 1193.753005][ T43] net_ratelimit: 5 callbacks suppressed [ 1193.753030][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.753125][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.824491][T18303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.825121][T18303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.854274][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.859884][T17665] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1193.906161][T18317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.952264][ T5944] steelseries 0003:1038:1410.0021: reserved main item tag 0xe [ 1194.005261][T18303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.005494][T18317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.006277][T18303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.066528][T17665] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1194.097395][ T5865] usb 7-1: USB disconnect, device number 12 [ 1194.116072][T18319] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1194.270941][ T5944] steelseries 0003:1038:1410.0021: missing HID_OUTPUT_REPORT 0 [ 1194.272183][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.555225][T18323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.394029][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1195.419197][T17665] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1195.430007][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.430205][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.430527][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.430833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.430969][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.620139][ T5944] usb 8-1: USB disconnect, device number 28 [ 1195.685305][T17665] usb 2-1: USB disconnect, device number 49 [ 1195.830101][T17665] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1195.936857][T17665] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1195.938103][T17665] quatech2 2-1:0.51: device disconnected [ 1196.999465][T18336] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3436'. [ 1197.000298][T18336] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 1197.281500][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3437'. [ 1197.767537][T18359] netlink: 'syz.7.3444': attribute type 1 has an invalid length. [ 1197.767567][T18359] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3444'. [ 1197.845611][T17665] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1198.059271][T17665] usb 7-1: Using ep0 maxpacket: 16 [ 1198.063401][T17665] usb 7-1: config index 0 descriptor too short (expected 4495, got 71) [ 1198.063433][T17665] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1198.063451][T17665] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.063470][T17665] usb 7-1: config 0 has no interface number 0 [ 1198.066625][T17665] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1198.066656][T17665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.066675][T17665] usb 7-1: Product: syz [ 1198.066689][T17665] usb 7-1: Manufacturer: syz [ 1198.066702][T17665] usb 7-1: SerialNumber: syz [ 1198.161345][T17665] usb 7-1: config 0 descriptor?? [ 1198.176536][T17665] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1198.176577][T17665] uvcvideo 7-1:0.105: No valid video chain found. [ 1198.445172][T18373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.445684][T18373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.480992][T18372] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3449'. [ 1199.017522][ T43] usb 7-1: USB disconnect, device number 13 [ 1199.060730][ T5865] net_ratelimit: 11 callbacks suppressed [ 1199.060755][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.060920][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.125871][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.109508][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.109808][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.186823][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.728299][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.080768][T13716] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1201.099683][T18403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1201.253498][T13716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.253539][T13716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.253569][T13716] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1201.253613][T13716] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1201.253638][T13716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.259630][T13716] usb 7-1: config 0 descriptor?? [ 1201.456412][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.456712][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.457175][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.700760][T13716] steelseries 0003:1038:1410.0022: reserved main item tag 0xe [ 1202.738635][T13716] steelseries 0003:1038:1410.0022: missing HID_OUTPUT_REPORT 0 [ 1203.021484][ T5981] usb 7-1: USB disconnect, device number 14 [ 1205.462402][T13716] net_ratelimit: 10 callbacks suppressed [ 1205.462424][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.462583][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.502439][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.502600][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.502743][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.658600][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3479'. [ 1205.701083][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1205.732309][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1205.882739][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1205.883741][ T43] usb 7-1: too many configurations: 135, using maximum allowed: 8 [ 1205.885237][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.885294][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.885323][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.885347][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.886823][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.886878][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.886905][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.886930][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.888524][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.888579][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.888605][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.888628][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.890186][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.890241][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.890268][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.890290][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.891881][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.891938][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.891967][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.891990][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.948855][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.949024][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1205.949109][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1205.949172][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1206.103701][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.103904][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1206.103982][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1206.104055][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1206.171192][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.171367][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1206.171465][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1206.171536][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1206.171667][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1206.171731][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.302656][ T43] usb 7-1: config 0 descriptor?? [ 1206.513135][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.563642][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.665724][T15877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.668415][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.668557][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.842649][ T43] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1207.160325][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.160936][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.666480][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 1207.669144][ T43] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1207.669176][ T43] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1207.669197][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.669221][ T43] usb 8-1: config 0 has no interface number 0 [ 1207.672088][ T43] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1207.672121][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.672143][ T43] usb 8-1: Product: syz [ 1207.672162][ T43] usb 8-1: Manufacturer: syz [ 1207.672177][ T43] usb 8-1: SerialNumber: syz [ 1208.664802][ T43] usb 8-1: config 0 descriptor?? [ 1208.787963][ T5886] usb 7-1: USB disconnect, device number 15 [ 1208.847977][ T43] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1208.848017][ T43] uvcvideo 8-1:0.105: No valid video chain found. [ 1209.243855][T18467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.244438][T18467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.282371][ T43] usb 8-1: USB disconnect, device number 29 [ 1210.372714][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1210.642135][T18513] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1210.744426][ T5981] net_ratelimit: 13 callbacks suppressed [ 1210.744450][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.744646][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.754228][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1210.840225][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3502'. [ 1211.158129][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.491344][T18497] Bluetooth: hci4: command 0x0406 tx timeout [ 1211.701314][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.701355][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.701380][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1211.701427][ T43] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1211.701452][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.730319][ T43] usb 2-1: config 0 descriptor?? [ 1211.801088][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.801244][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.802044][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.984656][ T5944] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1212.145068][ T5944] usb 8-1: Using ep0 maxpacket: 16 [ 1212.172517][ T5944] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1212.173079][ T5944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.173209][ T5944] usb 8-1: Product: syz [ 1212.173228][ T5944] usb 8-1: Manufacturer: syz [ 1212.173244][ T5944] usb 8-1: SerialNumber: syz [ 1212.213421][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.277794][ T5944] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1212.277850][ T5944] r8152-cfgselector 8-1: config 0 descriptor?? [ 1212.289313][ T43] steelseries 0003:1038:1410.0023: reserved main item tag 0xe [ 1212.290915][ T43] steelseries 0003:1038:1410.0023: missing HID_OUTPUT_REPORT 0 [ 1212.350135][ T43] usb 2-1: USB disconnect, device number 50 [ 1212.515140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.689999][ T5944] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1212.690673][ T5944] r8152-cfgselector 8-1: bad CDC descriptors [ 1212.723596][ T5944] r8152-cfgselector 8-1: USB disconnect, device number 30 [ 1213.077810][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.188978][T13716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.878862][T18564] netlink: 'syz.7.3515': attribute type 3 has an invalid length. [ 1213.930728][T18560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.059567][T18560] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1214.230604][T18497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.394833][T18572] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 1214.395051][T14384] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 1214.421144][T18497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.438675][T18497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.480711][T18497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.481584][T18497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1216.157041][ T10] net_ratelimit: 9 callbacks suppressed [ 1216.157067][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.171448][T17327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.186694][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.230255][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.246704][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.246741][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.261419][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.355466][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.361345][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.432318][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.752671][ T5809] Bluetooth: hci3: command tx timeout [ 1217.601876][ T5978] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1217.906716][ T5978] usb 8-1: Using ep0 maxpacket: 16 [ 1217.909101][ T5978] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1217.909133][ T5978] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1217.909156][ T5978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.909176][ T5978] usb 8-1: config 0 has no interface number 0 [ 1217.912283][ T5978] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1217.912317][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.912337][ T5978] usb 8-1: Product: syz [ 1217.912352][ T5978] usb 8-1: Manufacturer: syz [ 1217.912366][ T5978] usb 8-1: SerialNumber: syz [ 1217.995057][ T5978] usb 8-1: config 0 descriptor?? [ 1218.010442][ T5978] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1218.010483][ T5978] uvcvideo 8-1:0.105: No valid video chain found. [ 1218.294681][T18613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.295348][T18613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.335553][ T5978] usb 8-1: USB disconnect, device number 31 [ 1219.714575][ T5809] Bluetooth: hci3: command tx timeout [ 1219.808781][T18567] chnl_net:caif_netlink_parms(): no params data found [ 1220.618220][T17665] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1220.779021][T17665] usb 7-1: Using ep0 maxpacket: 16 [ 1220.781730][T17665] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 1220.781762][T17665] usb 7-1: config 0 has no interface number 0 [ 1220.781812][T17665] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.781841][T17665] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.781883][T17665] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1220.781909][T17665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.889465][T17665] usb 7-1: config 0 descriptor?? [ 1221.362498][T17665] hid (null): unknown global tag 0xe [ 1221.362780][T17665] hid (null): unknown global tag 0xd [ 1221.794713][ T5809] Bluetooth: hci3: command tx timeout [ 1221.807885][T18663] net_ratelimit: 17 callbacks suppressed [ 1221.831879][T18663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.832516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.879787][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.880669][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.884519][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.943421][T18663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.943656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.038526][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.038714][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.039709][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.175158][ T10] usb 7-1: USB disconnect, device number 16 [ 1223.280359][T18567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.280465][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.280728][T18567] bridge_slave_0: entered allmulticast mode [ 1223.283400][T18567] bridge_slave_0: entered promiscuous mode [ 1223.322680][T18567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.326460][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.326776][T18567] bridge_slave_1: entered allmulticast mode [ 1223.356343][T18567] bridge_slave_1: entered promiscuous mode [ 1223.422278][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.426114][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.522104][T18567] team0: Port device team_slave_0 added [ 1223.526311][T18567] team0: Port device team_slave_1 added [ 1223.583613][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.583633][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.583665][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.644337][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.644358][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.644389][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.762604][T18567] hsr_slave_0: entered promiscuous mode [ 1223.764050][T18567] hsr_slave_1: entered promiscuous mode [ 1223.765351][T18567] debugfs: 'hsr0' already exists in 'hsr' [ 1223.765381][T18567] Cannot create hsr debugfs directory [ 1223.872404][ T5809] Bluetooth: hci3: command tx timeout [ 1224.224629][T17665] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1224.419723][T17665] usb 7-1: Using ep0 maxpacket: 32 [ 1224.422783][T17665] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1224.449479][T17665] usb 7-1: config 3 has an invalid interface number: 41 but max is 0 [ 1224.449511][T17665] usb 7-1: config 3 has no interface number 0 [ 1224.449545][T17665] usb 7-1: config 3 interface 41 has no altsetting 0 [ 1224.493107][T17665] usb 7-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 1224.493140][T17665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.493160][T17665] usb 7-1: Product: syz [ 1224.493174][T17665] usb 7-1: Manufacturer: syz [ 1224.493189][T17665] usb 7-1: SerialNumber: syz [ 1224.761565][T18716] FAULT_INJECTION: forcing a failure. [ 1224.761565][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.761608][T18716] CPU: 1 UID: 0 PID: 18716 Comm: syz.7.3554 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1224.761677][T18716] Tainted: [L]=SOFTLOCKUP [ 1224.761685][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1224.761699][T18716] Call Trace: [ 1224.761709][T18716] [ 1224.761719][T18716] dump_stack_lvl+0xe8/0x150 [ 1224.761761][T18716] should_fail_ex+0x46b/0x600 [ 1224.761795][T18716] _copy_from_user+0x2d/0xb0 [ 1224.761826][T18716] __sys_bpf+0x229/0x950 [ 1224.761899][T18716] ? __pfx___sys_bpf+0x10/0x10 [ 1224.761924][T18716] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1224.761970][T18716] ? ksys_write+0x248/0x270 [ 1224.762008][T18716] ? __pfx_ksys_write+0x10/0x10 [ 1224.762049][T18716] __x64_sys_bpf+0x7c/0x90 [ 1224.762075][T18716] do_syscall_64+0x14d/0xf80 [ 1224.762107][T18716] ? trace_irq_disable+0x3b/0x150 [ 1224.762132][T18716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.762157][T18716] ? clear_bhb_loop+0x40/0x90 [ 1224.762185][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.762209][T18716] RIP: 0033:0x7f535a69c799 [ 1224.762228][T18716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.762248][T18716] RSP: 002b:00007f53588f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1224.762272][T18716] RAX: ffffffffffffffda RBX: 00007f535a915fa0 RCX: 00007f535a69c799 [ 1224.762288][T18716] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1224.762302][T18716] RBP: 00007f53588f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.762315][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.762329][T18716] R13: 00007f535a916038 R14: 00007f535a915fa0 R15: 00007fff638b9528 [ 1224.762365][T18716] [ 1224.893861][T17665] qmi_wwan 7-1:3.41: bogus CDC Union: master=0, slave=0 [ 1224.985667][T17665] qmi_wwan 7-1:3.41: probe with driver qmi_wwan failed with error -22 [ 1225.008943][T17665] usb 7-1: USB disconnect, device number 17 [ 1225.539697][ T5886] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1225.709179][ T5886] usb 8-1: Using ep0 maxpacket: 16 [ 1225.720565][ T5886] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1225.720598][ T5886] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1225.720621][ T5886] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.720642][ T5886] usb 8-1: config 0 has no interface number 0 [ 1225.769991][ T5886] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1225.770025][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.770047][ T5886] usb 8-1: Product: syz [ 1225.770062][ T5886] usb 8-1: Manufacturer: syz [ 1225.770077][ T5886] usb 8-1: SerialNumber: syz [ 1225.846050][ T5886] usb 8-1: config 0 descriptor?? [ 1225.904372][ T5886] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1225.904412][ T5886] uvcvideo 8-1:0.105: No valid video chain found. [ 1226.118525][T18741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.119111][T18741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.286200][ T43] usb 8-1: USB disconnect, device number 32 [ 1227.005875][ T1290] bridge_slave_1: left allmulticast mode [ 1227.005917][ T1290] bridge_slave_1: left promiscuous mode [ 1227.006187][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.123570][ T1290] bridge_slave_0: left allmulticast mode [ 1227.123602][ T1290] bridge_slave_0: left promiscuous mode [ 1227.123890][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.265397][T18769] overlayfs: failed to resolve './file2': -2 [ 1227.390516][T17665] net_ratelimit: 23 callbacks suppressed [ 1227.390538][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.690394][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.690970][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.691159][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.010924][T17665] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1228.180855][T17665] usb 8-1: Using ep0 maxpacket: 16 [ 1228.184185][T17665] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1228.184218][T17665] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1228.184239][T17665] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.184259][T17665] usb 8-1: config 0 has no interface number 0 [ 1228.188584][T17665] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1228.188618][T17665] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.188641][T17665] usb 8-1: Product: syz [ 1228.188658][T17665] usb 8-1: Manufacturer: syz [ 1228.188674][T17665] usb 8-1: SerialNumber: syz [ 1228.287459][T17665] usb 8-1: config 0 descriptor?? [ 1228.312787][T17665] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1228.312835][T17665] uvcvideo 8-1:0.105: No valid video chain found. [ 1228.556335][T18793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.565607][T18793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.667428][T18797] sctp: [Deprecated]: syz.8.3589 (pid 18797) Use of int in max_burst socket option. [ 1228.667428][T18797] Use struct sctp_assoc_value instead [ 1228.751262][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.751542][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.751994][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.850004][ T1290] bond1 (unregistering): Released all slaves [ 1228.912611][ T5978] usb 8-1: USB disconnect, device number 33 [ 1228.931045][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.157128][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.157353][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.473521][ T1290] tipc: Left network mode [ 1230.091294][ T5886] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1230.297417][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 1230.377903][ T5886] usb 8-1: config 8 has an invalid interface number: 243 but max is 0 [ 1230.377946][ T5886] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.377965][ T5886] usb 8-1: config 8 has no interface number 0 [ 1230.378005][ T5886] usb 8-1: config 8 interface 243 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1230.378035][ T5886] usb 8-1: config 8 interface 243 has no altsetting 0 [ 1230.380418][ T5886] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=ae.5f [ 1230.380449][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.380468][ T5886] usb 8-1: Product: syz [ 1230.380481][ T5886] usb 8-1: Manufacturer: syz [ 1230.380494][ T5886] usb 8-1: SerialNumber: syz [ 1230.906961][ T5886] usb 8-1: USB disconnect, device number 34 [ 1232.117343][T18877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3614'. [ 1232.392271][ T5978] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1232.578768][ T5978] usb 7-1: Using ep0 maxpacket: 32 [ 1232.595495][ T5978] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1232.595527][ T5978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.595547][ T5978] usb 7-1: Product: syz [ 1232.595651][ T5978] usb 7-1: Manufacturer: syz [ 1232.595665][ T5978] usb 7-1: SerialNumber: syz [ 1232.644932][ T5978] usb 7-1: config 0 descriptor?? [ 1232.670182][ T5978] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1232.670328][ T5978] dvb-usb: bulk message failed: -22 (4/0) [ 1232.670358][ T5978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1232.670484][ T5978] dvb-usb: bulk message failed: -22 (5/0) [ 1232.670501][ T5978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1232.782362][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1232.848273][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1232.849055][ T5978] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1232.849126][ T5978] usb 7-1: media controller created [ 1232.922853][T18880] dvb-usb: bulk message failed: -22 (7/0) [ 1232.922878][T18880] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1232.922922][T18880] ttusb2: i2c transfer failed. [ 1232.972584][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.993517][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1232.993660][ T43] net_ratelimit: 21 callbacks suppressed [ 1232.993678][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.993878][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.994075][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.001485][ T1379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.065100][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.088809][ T10] usb 8-1: config index 0 descriptor too short (expected 4495, got 71) [ 1233.088847][ T10] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1233.088870][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.088890][ T10] usb 8-1: config 0 has no interface number 0 [ 1233.089343][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.122099][ T10] usb 8-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1233.122134][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.122153][ T10] usb 8-1: Product: syz [ 1233.122169][ T10] usb 8-1: Manufacturer: syz [ 1233.122188][ T10] usb 8-1: SerialNumber: syz [ 1233.181899][ T10] usb 8-1: config 0 descriptor?? [ 1233.188221][ T10] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1233.188261][ T10] uvcvideo 8-1:0.105: No valid video chain found. [ 1233.220467][ T5978] usb 7-1: selecting invalid altsetting 3 [ 1233.220496][ T5978] ttusb2: set interface to alts=3 failed [ 1233.337714][ T5978] DVB: Unable to find symbol tda10086_attach() [ 1233.337735][ T5978] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1233.339970][ T5978] dvb-usb: bulk message failed: -22 (4/0) [ 1233.339998][ T5978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1233.340130][ T5978] dvb-usb: bulk message failed: -22 (5/0) [ 1233.340148][ T5978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1233.340219][ T5978] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1233.405282][ T5978] usb 7-1: USB disconnect, device number 18 [ 1233.503022][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.597529][T18891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.640103][T18891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.721538][ T5978] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1233.743929][T17664] usb 8-1: USB disconnect, device number 35 [ 1233.842306][T18567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1234.033526][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.033701][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.112963][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.139950][T18567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1234.235899][T18567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1234.293043][ T5978] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1234.339604][T18567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1235.267136][ T5978] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1235.270433][ T5978] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1235.270470][ T5978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.270489][ T5978] usb 7-1: Product: á·ì¯šã¤²é­žæ£šé‹¹ [ 1235.270504][ T5978] usb 7-1: Manufacturer: ဌ [ 1235.270519][ T5978] usb 7-1: SerialNumber: ݊潰ﲉ豑䘌諧ç¸ì‚£â´±èº“ç¹ãƒ…헼↋ç°æ ¶î®“숦ëŽì²—ížéž€îŠ³éž±ì¨‹ê±›ë™¨å»‹î°­çš‰é’¥äŒ¬á·”糯í­é¶§æ¶§æä–¨êŠ [ 1235.523410][ T1290] hsr_slave_0: left promiscuous mode [ 1235.635438][ T5978] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1235.666584][ T5978] usb 7-1: USB disconnect, device number 19 [ 1235.815989][ T1290] hsr_slave_1: left promiscuous mode [ 1235.816976][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.678595][ T1290] team0 (unregistering): Port device team_slave_1 removed [ 1238.103631][T18939] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1238.128778][T18929] syz_tun: entered promiscuous mode [ 1238.247357][T18944] RDS: rds_bind could not find a transport for 4004:0:20::, load rds_tcp or rds_rdma? [ 1238.355545][ T5978] net_ratelimit: 15 callbacks suppressed [ 1238.355566][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.356502][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.357064][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.357791][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.886552][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.886972][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.920977][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.947084][T15877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.975539][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.997040][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.003211][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.517826][T18940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.527634][T18940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.082554][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.297126][ T41] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.316841][ T41] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.317923][ T41] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.705728][ T41] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.207858][ T43] net_ratelimit: 6 callbacks suppressed [ 1244.207883][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.208135][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.747330][T18567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.810037][T18567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.854290][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.870877][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.875829][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.884351][T18999] tmpfs: Bad value for 'mpol' [ 1244.938908][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.939609][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.991303][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.991980][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.241625][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.241832][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.933349][ T1290] IPVS: stop unused estimator thread 0... [ 1246.024661][T18567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.048522][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.108194][T18567] veth0_vlan: entered promiscuous mode [ 1246.128542][T18567] veth1_vlan: entered promiscuous mode [ 1246.277778][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.278628][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.475696][T18567] veth0_macvtap: entered promiscuous mode [ 1246.490264][T18567] veth1_macvtap: entered promiscuous mode [ 1246.741456][T18567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.767523][T18567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.957721][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.962902][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.977721][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.989532][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.993302][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.097803][T19041] tmpfs: Bad value for 'mpol' [ 1249.240207][T19049] tmpfs: Bad value for 'mpol' [ 1249.808409][T17665] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1249.978777][T17665] usb 7-1: Using ep0 maxpacket: 32 [ 1249.981407][T17665] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1249.981439][T17665] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1249.981462][T17665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1249.981516][T17665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1249.981538][T17665] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1249.981564][T17665] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1249.981607][T17665] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1249.981632][T17665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.987717][T17665] usb 7-1: config 0 descriptor?? [ 1250.085363][T13763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.085387][T13763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.210604][ T5865] net_ratelimit: 5 callbacks suppressed [ 1250.210644][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.210816][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.326287][T17665] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1250.409059][T17665] usb 7-1: USB disconnect, device number 20 [ 1250.427514][T17665] usblp0: removed [ 1250.671594][T17327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.671618][T17327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.685278][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.869013][T17665] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1251.049044][T17665] usb 7-1: Using ep0 maxpacket: 32 [ 1251.052007][T17665] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1251.052040][T17665] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1251.052064][T17665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1251.052127][T17665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1251.052153][T17665] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1251.052180][T17665] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1251.052225][T17665] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1251.052250][T17665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.108378][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.163133][T17665] usb 7-1: config 0 descriptor?? [ 1251.239550][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.239927][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.384128][T17665] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1252.280478][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.450752][ C1] usblp0: nonzero read bulk status received: -71 [ 1252.500483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.510117][T19099] usblp0: error -71 reading from printer [ 1252.528050][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.582702][ C0] usblp0: nonzero read bulk status received: -71 [ 1252.583008][ T809] usb 7-1: USB disconnect, device number 21 [ 1253.338763][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.354499][T19101] usblp0: removed [ 1253.397346][ T5809] Bluetooth: hci3: unexpected subevent 0x10 length: 32 > 2 [ 1253.458442][T19128] netlink: 'syz.5.3691': attribute type 16 has an invalid length. [ 1253.458473][T19128] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1253.458510][T19128] veth1_macvtap: entered allmulticast mode [ 1254.697362][T19155] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1255.330210][T19168] bond_slave_1: Device is already in use. [ 1255.510579][ T5865] net_ratelimit: 5 callbacks suppressed [ 1255.510605][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.574363][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.650786][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.996964][T19185] input: syz0 as /devices/virtual/input/input36 [ 1256.524810][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.683183][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.717480][T19212] syzkaller0: entered promiscuous mode [ 1256.717515][T19212] syzkaller0: entered allmulticast mode [ 1256.917705][T19223] tmpfs: Unsupported parameter 'huge' [ 1256.983218][T19212] tipc: Started in network mode [ 1256.983259][T19212] tipc: Node identity 6e112dbcb68e, cluster identity 4711 [ 1256.985589][T19212] tipc: Enabled bearer , priority 0 [ 1257.101468][T19210] tipc: Resetting bearer [ 1257.161217][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.423207][T19210] tipc: Disabling bearer [ 1257.561496][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.761633][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.041440][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 1258.047133][ T43] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1258.047167][ T43] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1258.552451][ T5886] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1258.601914][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.602013][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.721729][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 1258.747275][ T5886] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1258.747303][ T5886] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1258.747322][ T5886] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1258.747340][ T5886] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.747373][ T5886] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1258.747391][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.051491][ T5886] usb 8-1: GET_CAPABILITIES returned 0 [ 1259.051556][ T5886] usbtmc 8-1:16.0: can't read capabilities [ 1259.249554][T17665] usb 8-1: USB disconnect, device number 36 [ 1260.683071][ T5886] net_ratelimit: 5 callbacks suppressed [ 1260.683095][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.950884][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.041945][T19308] syzkaller0: entered promiscuous mode [ 1261.041979][T19308] syzkaller0: entered allmulticast mode [ 1261.403130][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.418880][ T43] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1261.418966][ T43] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1261.691630][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.745037][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.983106][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.777995][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.008633][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.293438][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.761180][T19365] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1263.813562][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.964117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.199894][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3787'. [ 1265.885096][ T5865] net_ratelimit: 5 callbacks suppressed [ 1265.885118][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.126862][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.365067][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.924871][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.197676][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.839697][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.965375][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.219290][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.039439][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.253019][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.114373][ T5981] net_ratelimit: 5 callbacks suppressed [ 1271.114398][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.329451][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.126837][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.369293][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.477395][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.195433][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.437570][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.729042][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.920864][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.207583][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.309695][ T5886] net_ratelimit: 4 callbacks suppressed [ 1276.309722][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.530953][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.931841][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.351248][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.571852][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.369899][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.609161][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.611892][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.456162][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.489919][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.570134][ T5886] net_ratelimit: 4 callbacks suppressed [ 1281.570161][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.660187][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.732411][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.326640][T19370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.327434][T19370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.611327][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.773363][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.886158][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.902807][T19370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.024000][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.339971][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.650729][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.813177][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.931634][T19378] veth0: entered promiscuous mode [ 1284.292505][T17327] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.318932][T17327] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.319584][T17327] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.319688][T17327] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.595671][T18497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1284.759447][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.778791][T19397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1284.839050][T19400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1284.865210][T19400] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1284.908128][T19397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1284.946281][T19401] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1284.947536][T19401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1284.956531][T19402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1284.968252][T19402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1284.989217][T19402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.065888][T19397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1285.070241][T19397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1285.089423][T19404] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1285.090091][T19404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1285.141959][T19401] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1285.155927][T19400] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1285.158369][T19400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1285.253104][T19404] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1285.748403][T19404] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1285.800473][T18497] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1285.821782][T18497] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1285.883730][T19404] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1285.907912][T19404] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1286.007387][T14384] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1286.075061][T19404] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1286.852330][ T5865] net_ratelimit: 5 callbacks suppressed [ 1286.852348][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.012204][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.412021][ T43] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1287.413853][ T43] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1287.667880][T19400] Bluetooth: hci7: command tx timeout [ 1287.732010][T19400] Bluetooth: hci6: command tx timeout [ 1287.822689][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.892566][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.072048][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.145967][T19400] Bluetooth: hci8: command tx timeout [ 1288.222153][T19400] Bluetooth: hci9: command tx timeout [ 1288.393891][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.779417][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.932697][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.090421][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.112439][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.112758][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.113034][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.434412][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.750135][T19400] Bluetooth: hci7: command tx timeout [ 1289.750620][ T10] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1289.750638][ T10] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1289.812791][T19400] Bluetooth: hci6: command 0x041b tx timeout [ 1289.976352][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.164104][T19392] chnl_net:caif_netlink_parms(): no params data found [ 1290.214584][T19400] Bluetooth: hci8: command tx timeout [ 1290.257702][T19384] chnl_net:caif_netlink_parms(): no params data found [ 1290.273580][T19391] chnl_net:caif_netlink_parms(): no params data found [ 1290.292762][T19400] Bluetooth: hci9: command tx timeout [ 1290.310181][T19393] chnl_net:caif_netlink_parms(): no params data found [ 1290.398666][T19387] chnl_net:caif_netlink_parms(): no params data found [ 1290.499042][ T41] bridge_slave_1: left allmulticast mode [ 1290.499072][ T41] bridge_slave_1: left promiscuous mode [ 1290.499294][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.555209][ T41] bridge_slave_0: left allmulticast mode [ 1290.555237][ T41] bridge_slave_0: left promiscuous mode [ 1290.555421][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.406353][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.484034][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.507849][ T41] bond0 (unregistering): Released all slaves [ 1291.783528][ T41] tipc: Left network mode [ 1291.824590][T19400] Bluetooth: hci7: command tx timeout [ 1291.895849][T17664] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1291.895870][T17664] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 1291.931415][T19392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.931633][T19392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.931812][T19392] bridge_slave_0: entered allmulticast mode [ 1291.949745][T19392] bridge_slave_0: entered promiscuous mode [ 1292.053871][ T5981] net_ratelimit: 4 callbacks suppressed [ 1292.053888][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.062591][ T1183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.067119][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.073996][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.143621][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.165160][T19392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.165268][T19392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.165470][T19392] bridge_slave_1: entered allmulticast mode [ 1292.167444][T19392] bridge_slave_1: entered promiscuous mode [ 1292.203028][T19384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.203159][T19384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.208040][T19384] bridge_slave_0: entered allmulticast mode [ 1292.214139][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.215601][T19384] bridge_slave_0: entered promiscuous mode [ 1292.255488][T19391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.255619][T19391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.255792][T19391] bridge_slave_0: entered allmulticast mode [ 1292.257694][T19391] bridge_slave_0: entered promiscuous mode [ 1292.293496][T19400] Bluetooth: hci8: command tx timeout [ 1292.310104][T19393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.310229][T19393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.310428][T19393] bridge_slave_0: entered allmulticast mode [ 1292.312791][T19393] bridge_slave_0: entered promiscuous mode [ 1292.328305][T19384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.328636][T19384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.329325][T19384] bridge_slave_1: entered allmulticast mode [ 1292.363203][T19384] bridge_slave_1: entered promiscuous mode [ 1292.373480][T19400] Bluetooth: hci9: command tx timeout [ 1292.389269][T19391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.389416][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.389709][T19391] bridge_slave_1: entered allmulticast mode [ 1292.391870][T19391] bridge_slave_1: entered promiscuous mode [ 1292.431561][T19393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.431685][T19393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.431884][T19393] bridge_slave_1: entered allmulticast mode [ 1292.440226][T19393] bridge_slave_1: entered promiscuous mode [ 1292.485881][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.486045][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.486225][T19387] bridge_slave_0: entered allmulticast mode [ 1292.488130][T19387] bridge_slave_0: entered promiscuous mode [ 1292.539325][T19392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.576377][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.576534][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.576763][T19387] bridge_slave_1: entered allmulticast mode [ 1292.579050][T19387] bridge_slave_1: entered promiscuous mode [ 1292.625817][T19392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.652744][T19384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.690854][T19391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.726296][T19393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.729142][T19384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.769934][T19391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.934279][T17664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.018843][T19393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.022292][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.060684][T19392] team0: Port device team_slave_0 added [ 1293.099192][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.134833][T19392] team0: Port device team_slave_1 added [ 1293.137530][T19384] team0: Port device team_slave_0 added [ 1293.175964][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.209445][T19391] team0: Port device team_slave_0 added [ 1293.212042][T19384] team0: Port device team_slave_1 added [ 1293.218606][T19393] team0: Port device team_slave_0 added [ 1293.260651][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.264481][T19391] team0: Port device team_slave_1 added [ 1293.294225][T19393] team0: Port device team_slave_1 added [ 1293.296428][T19387] team0: Port device team_slave_0 added [ 1293.297771][T19392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.297785][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.297808][T19392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.393149][T19387] team0: Port device team_slave_1 added [ 1293.401100][T19392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.401114][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.401136][T19392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.474037][T19384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.474058][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.474089][T19384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.556842][T19384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.556858][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.556880][T19384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.558080][T19391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.558093][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.558114][T19391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.559380][T19393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.559397][T19393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.559428][T19393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.719511][T19391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.719526][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.719548][T19391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.720972][T19393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.720986][T19393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.721008][T19393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.722164][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.722176][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.722198][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.894445][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.054669][T17665] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 1294.054692][T17665] Bluetooth: hci8: Error when powering off device on rfkill (-110) [ 1294.082750][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.082766][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.082788][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.171727][T19392] hsr_slave_0: entered promiscuous mode [ 1294.172840][T19392] hsr_slave_1: entered promiscuous mode [ 1294.173591][T19392] debugfs: 'hsr0' already exists in 'hsr' [ 1294.173610][T19392] Cannot create hsr debugfs directory [ 1294.261107][T19384] hsr_slave_0: entered promiscuous mode [ 1294.262289][T19384] hsr_slave_1: entered promiscuous mode [ 1294.263046][T19384] debugfs: 'hsr0' already exists in 'hsr' [ 1294.263067][T19384] Cannot create hsr debugfs directory [ 1294.362629][T19391] hsr_slave_0: entered promiscuous mode [ 1294.363773][T19391] hsr_slave_1: entered promiscuous mode [ 1294.368980][T19391] debugfs: 'hsr0' already exists in 'hsr' [ 1294.369067][T19391] Cannot create hsr debugfs directory [ 1294.391809][T19393] hsr_slave_0: entered promiscuous mode [ 1294.392974][T19393] hsr_slave_1: entered promiscuous mode [ 1294.393817][T19393] debugfs: 'hsr0' already exists in 'hsr' [ 1294.393837][T19393] Cannot create hsr debugfs directory [ 1294.454448][T19400] Bluetooth: hci9: command tx timeout [ 1294.505687][T19387] hsr_slave_0: entered promiscuous mode [ 1294.506846][T19387] hsr_slave_1: entered promiscuous mode [ 1294.507600][T19387] debugfs: 'hsr0' already exists in 'hsr' [ 1294.507623][T19387] Cannot create hsr debugfs directory [ 1296.375686][ T5886] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 1296.375718][ T5886] Bluetooth: hci9: Error when powering off device on rfkill (-110) [ 1297.350673][ T809] net_ratelimit: 8 callbacks suppressed [ 1297.350700][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.418318][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.216044][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.379409][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.469725][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.696677][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.715779][ T41] hsr_slave_0: left promiscuous mode [ 1298.735914][ T41] hsr_slave_1: left promiscuous mode [ 1298.737885][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.737913][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.806815][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.806853][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.877686][ T41] veth1_macvtap: left promiscuous mode [ 1298.877775][ T41] veth0_macvtap: left promiscuous mode [ 1298.877954][ T41] veth1_vlan: left promiscuous mode [ 1298.878088][ T41] veth0_vlan: left promiscuous mode [ 1299.418382][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.499376][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.738088][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1299.797120][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1299.976414][T17665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.496527][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.537164][ T5944] net_ratelimit: 4 callbacks suppressed [ 1302.537188][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.700721][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.700998][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.023268][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.739885][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.525560][ T41] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.895123][ T41] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.771655][ T41] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.387319][ T41] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.414284][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.928908][T19392] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1310.992057][T19392] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1311.208253][T19392] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1311.307660][T19392] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1311.608892][T19384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1311.653618][T19384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1311.687615][T19384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1311.784156][T19384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1312.040896][T19393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1312.102222][T19393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1312.143905][T19393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1312.217907][T19393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1312.467838][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.467869][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.776876][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.776907][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.854402][T19391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1312.911592][T19391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1313.096523][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1313.096553][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.160738][T19391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1313.244343][T19391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1313.413242][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1313.413273][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.622114][T19387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1313.651730][T19387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1313.694552][T19392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.698593][T19387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1313.754067][T19387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1313.988968][T19392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.002898][T19384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.063113][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.064047][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.097812][ T41] bridge_slave_1: left allmulticast mode [ 1314.097845][ T41] bridge_slave_1: left promiscuous mode [ 1314.098099][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.172751][ T41] bridge_slave_0: left allmulticast mode [ 1314.172776][ T41] bridge_slave_0: left promiscuous mode [ 1314.172969][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.265564][ T41] bridge_slave_1: left allmulticast mode [ 1314.265588][ T41] bridge_slave_1: left promiscuous mode [ 1314.265775][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.324010][ T41] bridge_slave_0: left allmulticast mode [ 1314.324034][ T41] bridge_slave_0: left promiscuous mode [ 1314.324223][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.394845][ T41] bridge_slave_1: left allmulticast mode [ 1314.394870][ T41] bridge_slave_1: left promiscuous mode [ 1314.395054][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.478988][ T41] bridge_slave_0: left allmulticast mode [ 1314.479013][ T41] bridge_slave_0: left promiscuous mode [ 1314.479205][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.546611][ T41] bridge_slave_1: left allmulticast mode [ 1314.546636][ T41] bridge_slave_1: left promiscuous mode [ 1314.546822][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.612244][ T41] bridge_slave_0: left allmulticast mode [ 1314.612270][ T41] bridge_slave_0: left promiscuous mode [ 1314.612464][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.794028][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.874140][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.894259][ T41] bond0 (unregistering): Released all slaves [ 1316.413090][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.492589][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.513626][ T41] bond0 (unregistering): Released all slaves [ 1317.014497][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.112890][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.155027][ T41] bond0 (unregistering): Released all slaves [ 1317.712298][ T41] bond0 (unregistering): left promiscuous mode [ 1317.712333][ T41] bond_slave_0: left promiscuous mode [ 1317.712574][ T41] bond_slave_1: left promiscuous mode [ 1317.753006][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.813086][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.855516][ T41] bond0 (unregistering): Released all slaves [ 1317.869861][ T41] bond1 (unregistering): Released all slaves [ 1317.967852][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.968025][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.061227][T19384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.230389][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.231228][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.251025][T19393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.367213][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.367507][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.476506][T19393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.570024][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.570213][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.666171][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.685133][T17327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.685364][T17327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.006469][T19391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.066222][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.165875][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.180247][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.367689][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.373313][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.604419][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.802433][T17327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.810445][T17327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.158327][T17327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.158423][T17327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.325141][T19392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.386001][T19384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.051588][T19393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.540526][T19384] veth0_vlan: entered promiscuous mode [ 1321.703150][T19392] veth0_vlan: entered promiscuous mode [ 1321.731852][T19391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.880158][T19384] veth1_vlan: entered promiscuous mode [ 1322.014399][T19392] veth1_vlan: entered promiscuous mode [ 1322.047669][T19393] veth0_vlan: entered promiscuous mode [ 1322.189535][T19387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.202177][T19393] veth1_vlan: entered promiscuous mode [ 1322.403809][ T41] hsr_slave_0: left promiscuous mode [ 1322.424058][ T41] hsr_slave_1: left promiscuous mode [ 1322.425058][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.425082][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.616030][ T41] hsr_slave_0: left promiscuous mode [ 1322.633869][ T41] hsr_slave_1: left promiscuous mode [ 1322.634839][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.684813][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.787356][ T41] hsr_slave_0: left promiscuous mode [ 1322.824216][ T41] hsr_slave_1: left promiscuous mode [ 1322.825190][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.854755][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.913942][ T41] team0: left promiscuous mode [ 1322.913970][ T41] team_slave_0: left promiscuous mode [ 1322.914189][ T41] team_slave_1: left promiscuous mode [ 1323.065709][ T41] hsr_slave_0: left promiscuous mode [ 1323.084155][ T41] hsr_slave_1: left promiscuous mode [ 1323.085123][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.085147][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.137146][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.137180][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.309041][ T41] veth1_macvtap: left promiscuous mode [ 1323.309135][ T41] veth0_macvtap: left promiscuous mode [ 1323.309392][ T41] veth1_vlan: left promiscuous mode [ 1323.309524][ T41] veth0_vlan: left promiscuous mode [ 1323.464528][ T41] veth1_macvtap: left promiscuous mode [ 1323.464780][ T41] veth1_vlan: left promiscuous mode [ 1323.464910][ T41] veth0_vlan: left promiscuous mode [ 1324.437530][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1324.496252][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1325.246317][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1325.305540][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1325.955614][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1326.005688][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1326.807402][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1326.857073][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1327.191947][T19384] veth0_macvtap: entered promiscuous mode [ 1327.234189][T19392] veth0_macvtap: entered promiscuous mode [ 1327.247779][T19384] veth1_macvtap: entered promiscuous mode [ 1327.293341][T19392] veth1_macvtap: entered promiscuous mode [ 1327.342894][T19393] veth0_macvtap: entered promiscuous mode [ 1327.373457][T19393] veth1_macvtap: entered promiscuous mode [ 1327.392753][T19384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.430578][T19392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.444684][T19384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.528356][T19387] veth0_vlan: entered promiscuous mode [ 1327.572206][T19392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.611895][ T1171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.624544][T19391] veth0_vlan: entered promiscuous mode [ 1327.642680][ T1171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.655796][ T1171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.661712][T19393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.722386][ T1171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.743638][ T1171] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.749537][T19387] veth1_vlan: entered promiscuous mode [ 1327.791884][ T1171] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.807000][T19393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.807073][ T1171] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.960879][ T1171] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.065310][T19391] veth1_vlan: entered promiscuous mode [ 1328.342564][ T1290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.409054][ T1290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.428022][ T1290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.714872][ T1290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.354023][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.354042][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.633562][T19387] veth0_macvtap: entered promiscuous mode [ 1329.715844][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.715870][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.833852][T19387] veth1_macvtap: entered promiscuous mode [ 1329.883474][T19391] veth0_macvtap: entered promiscuous mode [ 1329.892653][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.892674][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.980000][T19391] veth1_macvtap: entered promiscuous mode [ 1330.105840][T19387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.188038][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.188064][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.215074][T19391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.237910][T19387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.241598][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.241622][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.333192][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.404180][ T1423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.435520][ T1423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.446003][ T1423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.464259][ T1423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.545000][ T1423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.582038][ T1423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.681004][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.681031][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.713274][ T1423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.753700][ T1423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.608690][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.608712][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.682989][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.683011][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.934333][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.934357][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.197448][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.197481][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.622899][T19779] syzkaller0: entered promiscuous mode [ 1335.622929][T19779] syzkaller0: entered allmulticast mode [ 1335.868224][ T809] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1336.048354][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1336.048394][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1336.048430][ T809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1336.048447][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.065092][ T809] usb 5-1: config 0 descriptor?? [ 1336.160487][ T809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1336.355409][T19798] overlayfs: missing 'workdir' [ 1336.426557][ T41] IPVS: stop unused estimator thread 0... [ 1336.442729][ T41] IPVS: stop unused estimator thread 0... [ 1338.611175][ T5886] usb 5-1: USB disconnect, device number 31 [ 1340.352924][T19904] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1340.352956][T19904] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1340.361255][T19904] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1341.004178][T19916] kvm: kvm [19915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2180 [ 1341.044706][T19916] kvm_intel: kvm [19915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc22b [ 1343.351290][T19991] kvm: kvm [19990]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2180 [ 1343.354065][T19991] kvm_intel: kvm [19990]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xc22b [ 1343.392278][T20003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1345.588796][T20052] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1345.631019][T20052] syzkaller0: entered promiscuous mode [ 1345.631039][T20052] syzkaller0: entered allmulticast mode [ 1345.840675][T20058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1347.110070][T20089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.693706][T20099] autofs: Unknown parameter 'fd0x0000000000000000' [ 1347.738844][T20103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3891'. [ 1348.046302][T19401] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1348.119984][T19401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1348.143205][T19401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1348.144679][T19401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1348.146800][T19401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1349.088493][T20133] overlayfs: failed to resolve './file2': -2 [ 1349.167490][T20137] autofs: Unknown parameter 'fd0x0000000000000000' [ 1349.799284][T20165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1349.908666][T20108] chnl_net:caif_netlink_parms(): no params data found [ 1350.398863][T19400] Bluetooth: hci0: command tx timeout [ 1350.585658][T20108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.585874][T20108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.586121][T20108] bridge_slave_0: entered allmulticast mode [ 1350.588994][T20108] bridge_slave_0: entered promiscuous mode [ 1350.597616][T20108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.597842][T20108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.598117][T20108] bridge_slave_1: entered allmulticast mode [ 1350.607321][T20108] bridge_slave_1: entered promiscuous mode [ 1350.724757][T20108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.729198][T20108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.793987][T20108] team0: Port device team_slave_0 added [ 1350.797888][T20108] team0: Port device team_slave_1 added [ 1350.869036][T20108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.869058][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.869088][T20108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.871532][T20108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.871548][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.871576][T20108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.085538][T20108] hsr_slave_0: entered promiscuous mode [ 1351.087031][T20108] hsr_slave_1: entered promiscuous mode [ 1351.103623][T17665] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1351.300114][T17665] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1351.300169][T17665] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1351.300198][T17665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.326829][T17665] usb 5-1: config 0 descriptor?? [ 1351.372973][T17665] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1351.583890][T17665] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1351.772571][T17665] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.772619][T17665] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1351.798572][T17665] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1351.798610][T17665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1351.798626][T17665] usb 4-1: Product: syz [ 1351.798638][T17665] usb 4-1: Manufacturer: syz [ 1351.798649][T17665] usb 4-1: SerialNumber: syz [ 1352.509455][T19400] Bluetooth: hci0: command tx timeout [ 1353.087916][T20244] overlayfs: failed to clone upperpath [ 1353.815233][ T5886] usb 5-1: USB disconnect, device number 32 [ 1354.306819][ T5886] usb 4-1: USB disconnect, device number 25 [ 1354.561096][T19400] Bluetooth: hci0: command tx timeout [ 1354.985915][T20108] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1355.055456][T17665] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1355.095861][T20108] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1355.150567][T20108] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1355.216878][T17665] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1355.216912][T17665] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.220119][T17665] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1355.220154][T17665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1355.220185][T17665] usb 5-1: Product: syz [ 1355.220201][T17665] usb 5-1: Manufacturer: syz [ 1355.220217][T17665] usb 5-1: SerialNumber: syz [ 1355.233704][T20108] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1355.862252][T20108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.934496][T20108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.993825][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.024287][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.050757][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.069348][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.635107][T19400] Bluetooth: hci0: command tx timeout [ 1357.009562][T20108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.802686][T17665] usb 5-1: USB disconnect, device number 33 [ 1358.512867][T20412] overlayfs: failed to resolve './file2': -2 [ 1359.632603][T20436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1359.908323][T20108] veth0_vlan: entered promiscuous mode [ 1360.009329][T20108] veth1_vlan: entered promiscuous mode [ 1360.358840][T20108] veth0_macvtap: entered promiscuous mode [ 1360.382362][T20108] veth1_macvtap: entered promiscuous mode [ 1360.426647][T20108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.520643][T20108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.549232][ T1183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.549705][ T1183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.549968][ T1183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.550008][ T1183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.755859][T17665] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1360.900677][ T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1361.260640][T17665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.260697][T17665] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1361.260739][T17665] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1361.280480][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.280543][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1361.294387][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1361.294498][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1361.294535][ T43] usb 5-1: Product: syz [ 1361.294551][ T43] usb 5-1: Manufacturer: syz [ 1361.294568][ T43] usb 5-1: SerialNumber: syz [ 1361.385185][T17665] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1361.385221][T17665] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1361.385243][T17665] usb 4-1: Manufacturer: syz [ 1361.674028][T17665] usb 4-1: config 0 descriptor?? [ 1361.770403][T17665] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1361.976883][ T43] usb 5-1: USB disconnect, device number 34 [ 1362.653334][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.653360][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.945109][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.945137][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.547062][T17665] usb 4-1: USB disconnect, device number 26 [ 1366.308088][T17665] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1366.460520][T17665] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.460567][T17665] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1366.463564][T17665] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1366.463597][T17665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1366.463619][T17665] usb 4-1: Product: syz [ 1366.463636][T17665] usb 4-1: Manufacturer: syz [ 1366.463652][T17665] usb 4-1: SerialNumber: syz [ 1366.704078][T20582] team0 (unregistering): Port device team_slave_0 removed [ 1366.804272][T20582] team0 (unregistering): Port device team_slave_1 removed [ 1367.856935][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.131148][ T5886] usb 4-1: USB disconnect, device number 27 [ 1373.131076][T20853] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1373.131141][T20853] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1374.904328][T20942] overlayfs: failed to clone upperpath [ 1378.020792][T21070] overlayfs: missing 'lowerdir' [ 1378.069072][T21073] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1378.069135][T21073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1378.673010][T21101] overlayfs: missing 'workdir' [ 1379.112912][T21120] overlayfs: missing 'lowerdir' [ 1379.679934][T21143] overlayfs: missing 'lowerdir' [ 1380.266429][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4230'. [ 1380.430045][T21182] overlayfs: missing 'lowerdir' [ 1380.491936][T21186] fuse: Bad value for 'fd' [ 1381.200130][T21216] fuse: Bad value for 'fd' [ 1381.247428][T21219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4249'. [ 1381.354259][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4251'. [ 1381.907566][T21249] fuse: Bad value for 'fd' [ 1382.426145][T21275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1382.743621][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1382.774923][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1382.775657][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1382.778369][T21287] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1385.683199][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4325'. [ 1386.058234][T21423] syzkaller0: entered promiscuous mode [ 1386.058265][T21423] syzkaller0: entered allmulticast mode [ 1386.185605][T21438] fuse: Bad value for 'fd' [ 1386.882993][T21460] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1387.246037][T21472] fuse: Bad value for 'fd' [ 1388.179328][T21508] fuse: Bad value for 'fd' [ 1388.728236][T21527] tc_dump_action: action bad kind [ 1388.980493][T21537] fuse: Bad value for 'fd' [ 1389.292228][T21553] overlayfs: failed to resolve './file1': -2 [ 1389.383066][T21550] team0 (unregistering): Port device team_slave_0 removed [ 1389.437147][T21550] team0 (unregistering): Port device team_slave_1 removed [ 1389.525709][T21562] tc_dump_action: action bad kind [ 1389.719590][T21573] fuse: Unknown parameter 'group_i00000000000000000000' [ 1389.758943][T21572] overlayfs: missing 'workdir' [ 1390.411771][T21598] tc_dump_action: action bad kind [ 1390.491829][T21600] overlayfs: failed to resolve './file1': -2 [ 1390.705237][T21608] fuse: Bad value for 'fd' [ 1391.379041][T21647] fuse: Bad value for 'fd' [ 1391.922904][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'. [ 1392.444021][T21680] fuse: Bad value for 'fd' [ 1393.715062][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4434'. [ 1396.176242][T21798] overlayfs: failed to clone upperpath [ 1396.529476][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4476'. [ 1397.280266][T21851] overlayfs: failed to clone upperpath [ 1397.722009][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1397.890229][T21882] overlayfs: failed to clone upperpath [ 1398.397768][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1398.856701][T21930] overlayfs: failed to clone upperpath [ 1399.740607][T21973] overlayfs: failed to clone upperpath [ 1400.736882][T22022] overlayfs: failed to clone upperpath [ 1400.766881][T22024] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4548'. [ 1401.258791][T22054] fuse: Bad value for 'fd' [ 1401.260027][T22053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1401.278346][T22053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1401.366162][T22057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1401.634496][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1401.837690][T22079] netlink: 'syz.4.4564': attribute type 39 has an invalid length. [ 1402.795863][T22105] netlink: 'syz.4.4577': attribute type 10 has an invalid length. [ 1402.831240][T22105] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1404.565028][T22168] netlink: 'syz.3.4595': attribute type 2 has an invalid length. [ 1405.225494][T22194] netlink: 'syz.4.4604': attribute type 39 has an invalid length. [ 1405.472909][T22202] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.4607'. [ 1406.650247][T22247] netlink: 'syz.3.4622': attribute type 39 has an invalid length. [ 1407.214157][T22263] netlink: 'syz.4.4629': attribute type 2 has an invalid length. [ 1407.658793][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1408.006628][T22296] netlink: 'syz.0.4644': attribute type 2 has an invalid length. [ 1408.711672][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1408.911660][T22336] netlink: 'syz.3.4659': attribute type 2 has an invalid length. [ 1409.003290][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1409.003346][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1411.732282][T22442] fuse: Bad value for 'fd' [ 1413.319570][T22510] fuse: Bad value for 'fd' [ 1414.392234][T22554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1414.655828][T22567] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4745'. [ 1414.920526][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1415.695544][T22616] netlink: 'syz.0.4762': attribute type 39 has an invalid length. [ 1416.290281][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4769'. [ 1416.423009][T22641] fuse: Bad value for 'fd' [ 1418.039691][T22720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4801'. [ 1418.240335][T22730] netlink: 'syz.6.4804': attribute type 10 has an invalid length. [ 1418.303157][T22730] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1422.443563][T22934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.462352][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.462519][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.762623][T22940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1424.760272][T23020] fuse: Bad value for 'fd' [ 1425.030573][T23030] overlayfs: failed to clone upperpath [ 1425.374570][T23048] netlink: 'syz.0.4919': attribute type 6 has an invalid length. [ 1426.008258][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4931'. [ 1426.995836][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1428.145246][T23171] fuse: Unknown parameter 'user_i00000000000000000000' [ 1429.322526][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.071731][T23227] fuse: Bad value for 'fd' [ 1430.174455][T23230] fuse: Unknown parameter 'user_id00000000000000000000' [ 1431.164187][T23264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1431.806415][T23295] fuse: Unknown parameter 'user_id00000000000000000000' [ 1431.959809][T23302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1432.487750][T23322] netlink: 'syz.0.5017': attribute type 2 has an invalid length. [ 1433.249049][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1433.249085][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1433.250171][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1433.360233][T23357] fuse: Unknown parameter 'user_id00000000000000000000' [ 1434.851350][T23409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1435.977782][T23461] fuse: Bad value for 'fd' [ 1436.034830][T23464] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5070'. [ 1436.437087][ T36] audit: type=1326 audit(1772721316.896:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23476 comm="syz.4.5075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e5602c799 code=0x0 [ 1436.720337][T23488] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5079'. [ 1437.474941][T23524] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5092'. [ 1441.462149][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5164'. [ 1442.966268][T23788] block device autoloading is deprecated and will be removed. [ 1443.871849][T23836] fuse: Bad value for 'fd' [ 1446.003296][T23940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5240'. [ 1446.004298][T23940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5240'. [ 1447.829059][T24016] block device autoloading is deprecated and will be removed. [ 1448.947672][T24060] block device autoloading is deprecated and will be removed. [ 1449.910361][ T36] audit: type=1326 audit(1772721330.352:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24110 comm="syz.0.5302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885b48c799 code=0x0 [ 1452.497427][T24207] blktrace: Concurrent blktraces are not allowed on loop6 [ 1454.695673][T24307] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5372'. [ 1455.584165][T24342] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1457.322691][T24415] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1457.435212][T24419] netlink: 'syz.3.5414': attribute type 4 has an invalid length. [ 1458.072743][T24451] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1458.641116][T24479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1459.462278][T24488] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1460.262283][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1460.262316][T24533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1460.617898][T24543] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5461'. [ 1461.693182][T24575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5470'. [ 1461.693210][T24575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5470'. [ 1462.177722][T24624] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1463.717056][T24664] trusted_key: encrypted_key: insufficient parameters specified [ 1464.784394][ T36] audit: type=1326 audit(1772721345.218:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.784459][ T36] audit: type=1326 audit(1772721345.218:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.784501][ T36] audit: type=1326 audit(1772721345.218:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.784543][ T36] audit: type=1326 audit(1772721345.218:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.784582][ T36] audit: type=1326 audit(1772721345.218:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.784622][ T36] audit: type=1326 audit(1772721345.218:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.785687][ T36] audit: type=1326 audit(1772721345.218:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.785742][ T36] audit: type=1326 audit(1772721345.218:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.785783][ T36] audit: type=1326 audit(1772721345.218:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1464.786041][ T36] audit: type=1326 audit(1772721345.218:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.3.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f671132c799 code=0x7ffc0000 [ 1466.808427][T24741] netlink: 'syz.6.5513': attribute type 10 has an invalid length. [ 1466.808843][T24741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.814450][T24741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.955480][T24741] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1467.886276][T24773] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1468.587585][T24800] sctp: [Deprecated]: syz.0.5536 (pid 24800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1468.587585][T24800] Use struct sctp_sack_info instead [ 1469.178014][T24823] netlink: 'syz.0.5546': attribute type 39 has an invalid length. [ 1470.227222][T24870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 1470.455134][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 1470.455155][ T36] audit: type=1326 audit(1772721350.906:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.455216][ T36] audit: type=1326 audit(1772721350.906:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.457241][ T36] audit: type=1326 audit(1772721350.906:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.477579][ T36] audit: type=1326 audit(1772721350.916:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.513243][ T36] audit: type=1326 audit(1772721350.926:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.513315][ T36] audit: type=1326 audit(1772721350.966:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.564498][ T36] audit: type=1326 audit(1772721351.016:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f6aec799 code=0x7ffc0000 [ 1470.569140][ T36] audit: type=1326 audit(1772721351.016:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f81f6aacfce code=0x7ffc0000 [ 1470.576856][ T36] audit: type=1326 audit(1772721351.026:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f81f6aacfce code=0x7ffc0000 [ 1470.579394][ T36] audit: type=1326 audit(1772721351.026:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f81f6aacfce code=0x7ffc0000 [ 1472.350598][T19400] Bluetooth: hci0: command 0x0406 tx timeout [ 1472.955231][T24971] netlink: 'syz.6.5599': attribute type 10 has an invalid length. [ 1474.176160][T25008] netlink: 'syz.0.5612': attribute type 10 has an invalid length. [ 1474.176324][T25008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.202456][T19400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1474.242679][T25008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.266321][T19400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1474.345196][T19400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1474.372372][T25008] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1474.694151][T19400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1474.696801][T19400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1475.807405][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 1475.807424][ T36] audit: type=1800 audit(1772721356.255:1021): pid=25038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5621" name="bus" dev="tmpfs" ino=1757 res=0 errno=0 [ 1477.002044][T19400] Bluetooth: hci1: command tx timeout [ 1477.432020][T25083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5634'. [ 1477.951901][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1478.102869][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.460020][T25102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1478.936995][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.074585][T19400] Bluetooth: hci1: command tx timeout [ 1479.283396][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5642'. [ 1479.542114][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.668023][T25129] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1479.670428][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1479.678923][T25131] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1479.719594][T25129] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1479.995975][T25138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5646'. [ 1480.029867][T25142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1480.315536][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.885465][T25003] chnl_net:caif_netlink_parms(): no params data found [ 1481.153041][T19400] Bluetooth: hci1: command tx timeout [ 1481.524557][T25003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.524774][T25003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.525060][T25003] bridge_slave_0: entered allmulticast mode [ 1481.528475][T25003] bridge_slave_0: entered promiscuous mode [ 1481.594180][T25003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.594286][T25003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.594839][T25003] bridge_slave_1: entered allmulticast mode [ 1481.599593][T25003] bridge_slave_1: entered promiscuous mode [ 1481.887431][T25003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.048572][T25003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.125481][ T13] bridge_slave_1: left allmulticast mode [ 1482.125510][ T13] bridge_slave_1: left promiscuous mode [ 1482.125846][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.277557][ T13] bridge_slave_0: left allmulticast mode [ 1482.277592][ T13] bridge_slave_0: left promiscuous mode [ 1482.277862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.243638][T19401] Bluetooth: hci1: command tx timeout [ 1483.544607][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.629457][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.677448][ T13] bond0 (unregistering): Released all slaves [ 1483.790177][T25003] team0: Port device team_slave_0 added [ 1483.924539][T25003] team0: Port device team_slave_1 added [ 1484.034491][ T36] audit: type=1800 audit(1772721364.472:1022): pid=25232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5673" name="bus" dev="tmpfs" ino=1708 res=0 errno=0 [ 1484.145581][T25003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.145596][T25003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.145618][T25003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.147441][T25003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.147455][T25003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.147482][T25003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.930706][T25255] __nla_validate_parse: 2 callbacks suppressed [ 1484.930727][T25255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1485.287367][T25003] hsr_slave_0: entered promiscuous mode [ 1485.289781][T25003] hsr_slave_1: entered promiscuous mode [ 1485.292789][T25003] debugfs: 'hsr0' already exists in 'hsr' [ 1485.292820][T25003] Cannot create hsr debugfs directory [ 1486.186914][ T13] hsr_slave_0: left promiscuous mode [ 1486.254591][ T13] hsr_slave_1: left promiscuous mode [ 1486.255954][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1486.255985][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.325949][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1486.325983][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.501685][ T13] veth1_macvtap: left promiscuous mode [ 1486.501794][ T13] veth0_macvtap: left promiscuous mode [ 1486.502046][ T13] veth1_vlan: left promiscuous mode [ 1486.502230][ T13] veth0_vlan: left promiscuous mode [ 1487.749169][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1487.797326][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1488.992483][T25357] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1490.767742][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.189708][T25400] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5729'. [ 1491.657485][T25408] netlink: 'syz.0.5733': attribute type 39 has an invalid length. [ 1492.590963][T25431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1492.959841][T25437] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5740'. [ 1493.441037][T25003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1493.518295][T25003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1493.540442][T25458] netlink: 'syz.0.5746': attribute type 39 has an invalid length. [ 1493.627989][T25003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1493.685618][T25003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1494.322479][T25482] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1494.381221][T25003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.512348][T25003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.571883][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.572543][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.665850][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.665983][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.717917][T25511] netlink: 'syz.0.5758': attribute type 39 has an invalid length. [ 1495.878310][ T37] INFO: task syz.9.3802:19741 blocked for more than 143 seconds. [ 1495.878342][ T37] Tainted: G L syzkaller #0 [ 1495.878358][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.878370][ T37] task:syz.9.3802 state:D stack:25728 pid:19741 tgid:19740 ppid:19392 task_flags:0x400140 flags:0x00080002 [ 1495.878441][ T37] Call Trace: [ 1495.878451][ T37] [ 1495.878468][ T37] __schedule+0x1553/0x5240 [ 1495.878512][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1495.878544][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1495.878589][ T37] ? rt_spin_lock+0x1e0/0x400 [ 1495.878618][ T37] ? __pfx___schedule+0x10/0x10 [ 1495.878658][ T37] ? schedule+0x90/0x360 [ 1495.878692][ T37] schedule+0x164/0x360 [ 1495.878800][ T37] __fuse_simple_request+0x121f/0x1c60 [ 1495.878985][ T37] ? __pfx___fuse_simple_request+0x10/0x10 [ 1495.879016][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1495.879062][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1495.879095][ T37] ? __kasan_kmalloc+0x93/0xb0 [ 1495.879203][ T37] ? fuse_send_init+0x57/0x6a0 [ 1495.879269][ T37] fuse_send_init+0x40f/0x6a0 [ 1495.879321][ T37] ? __pfx_fuse_fill_super+0x10/0x10 [ 1495.879362][ T37] get_tree_nodev+0xbb/0x150 [ 1495.879399][ T37] fuse_get_tree+0x304/0x500 [ 1495.879429][ T37] vfs_get_tree+0x92/0x2a0 [ 1495.879466][ T37] do_new_mount+0x341/0xd30 [ 1495.879521][ T37] ? safesetid_security_capable+0xa9/0x1a0 [ 1495.879561][ T37] ? __pfx_do_new_mount+0x10/0x10 [ 1495.879588][ T37] ? ns_capable+0x89/0xe0 [ 1495.879623][ T37] ? path_mount+0x690/0x10e0 [ 1495.879653][ T37] ? user_path_at+0xd4/0x160 [ 1495.879702][ T37] __se_sys_mount+0x31d/0x420 [ 1495.879738][ T37] ? __pfx___se_sys_mount+0x10/0x10 [ 1495.879773][ T37] ? __x64_sys_mount+0x20/0xc0 [ 1495.879804][ T37] do_syscall_64+0x14d/0xf80 [ 1495.879840][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.879866][ T37] ? clear_bhb_loop+0x40/0x90 [ 1495.879897][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.879920][ T37] RIP: 0033:0x7fb76d03c799 [ 1495.879943][ T37] RSP: 002b:00007fb76b28e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1495.879969][ T37] RAX: ffffffffffffffda RBX: 00007fb76d2b5fa0 RCX: 00007fb76d03c799 [ 1495.879986][ T37] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 1495.880002][ T37] RBP: 00007fb76d0d2bd9 R08: 00002000000003c0 R09: 0000000000000000 [ 1495.880017][ T37] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 1495.880031][ T37] R13: 00007fb76d2b6038 R14: 00007fb76d2b5fa0 R15: 00007fff9cd04c08 [ 1495.880067][ T37] [ 1495.880117][ T37] [ 1495.880117][ T37] Showing all locks held in the system: [ 1495.880128][ T37] 3 locks held by kworker/0:1/10: [ 1495.880141][ T37] #0: ffff888019c03d38 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1495.880212][ T37] #1: ffffc900000f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1495.880276][ T37] #2: ffff888029d44260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 1495.880400][ T37] 1 lock held by khungtaskd/37: [ 1495.880414][ T37] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1495.880490][ T37] 11 locks held by kworker/u8:12/1290: [ 1495.880524][ T37] 2 locks held by getty/5557: [ 1495.880536][ T37] #0: ffff88823be940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1495.880672][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1495.880740][ T37] 5 locks held by syz-executor/19384: [ 1495.880753][ T37] #0: ffff888061debd08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1495.880835][ T37] #1: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1495.880949][ T37] #2: ffff88802a5c8598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1495.881017][ T37] #3: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1495.881075][ T37] #4: ffff8880b8833f90 ((lock)#2){+.+.}-{3:3}, at: __folio_batch_add_and_move+0x283/0xa90 [ 1495.881199][ T37] 1 lock held by syz.9.3802/19741: [ 1495.881212][ T37] #0: ffff8880348b80d0 (&type->s_umount_key#54/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 1495.881293][ T37] 3 locks held by kworker/u8:8/24606: [ 1495.881306][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1495.881370][ T37] #1: ffffc9001462fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1495.881434][ T37] #2: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1495.881506][ T37] 1 lock held by syz-executor/25003: [ 1495.881523][ T37] 3 locks held by dhcpcd-run-hook/25478: [ 1495.881535][ T37] #0: ffff888037532480 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1495.881620][ T37] #1: ffff8880551d4518 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1495.881709][ T37] #2: ffff8880b8833f90 ((lock)#2){+.+.}-{3:3}, at: __folio_batch_add_and_move+0x283/0xa90 [ 1495.881782][ T37] 1 lock held by syz.4.5755/25494: [ 1495.881796][ T37] 4 locks held by syz.4.5755/25509: [ 1495.881809][ T37] 5 locks held by syz.6.5759/25513: [ 1495.881821][ T37] #0: ffff8880334f3088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1495.881874][ T37] #1: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1495.881936][ T37] #2: ffff88805c845658 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1495.882003][ T37] #3: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1495.882059][ T37] #4: ffff8880b8833f90 ((lock)#2){+.+.}-{3:3}, at: __folio_batch_add_and_move+0x283/0xa90 [ 1495.882130][ T37] 2 locks held by syz.3.5760/25517: [ 1495.882144][ T37] [ 1495.882150][ T37] ============================================= [ 1495.882150][ T37] [ 1495.882168][ T37] NMI backtrace for cpu 1 [ 1495.882188][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1495.882218][ T37] Tainted: [L]=SOFTLOCKUP [ 1495.882227][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1495.882240][ T37] Call Trace: [ 1495.882251][ T37] [ 1495.882261][ T37] dump_stack_lvl+0xe8/0x150 [ 1495.882304][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1495.882365][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1495.882401][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1495.882432][ T37] sys_info+0x135/0x170 [ 1495.882453][ T37] watchdog+0xfd9/0x1030 [ 1495.882490][ T37] ? watchdog+0x21a/0x1030 [ 1495.882526][ T37] kthread+0x388/0x470 [ 1495.882551][ T37] ? __pfx_watchdog+0x10/0x10 [ 1495.882576][ T37] ? __pfx_kthread+0x10/0x10 [ 1495.882602][ T37] ret_from_fork+0x51e/0xb90 [ 1495.882638][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.882670][ T37] ? __switch_to+0xc7d/0x1450 [ 1495.882703][ T37] ? __pfx_kthread+0x10/0x10 [ 1495.882729][ T37] ret_from_fork_asm+0x1a/0x30 [ 1495.882768][ T37] [ 1495.882777][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1495.882815][ C0] NMI backtrace for cpu 0 [ 1495.882834][ C0] CPU: 0 UID: 0 PID: 1290 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1495.882861][ C0] Tainted: [L]=SOFTLOCKUP [ 1495.882868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1495.882881][ C0] Workqueue: bat_events batadv_dat_purge [ 1495.882963][ C0] RIP: 0010:preempt_count_add+0x0/0x190 [ 1495.882991][ C0] Code: 3c 24 e8 13 ca 96 00 eb 8a e9 ed fe ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 [ 1495.883008][ C0] RSP: 0018:ffffc9000685f9b8 EFLAGS: 00000046 [ 1495.883024][ C0] RAX: dad8d4ad6c39d400 RBX: ffffc9000685fa08 RCX: dffffc0000000000 [ 1495.883039][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 1495.883050][ C0] RBP: ffffc9000685fa78 R08: ffff888088e8f857 R09: 1ffff110111d1f0a [ 1495.883065][ C0] R10: dffffc0000000000 R11: ffffed10111d1f0b R12: 1ffff92000d0bf41 [ 1495.883080][ C0] R13: 0000000000000246 R14: ffff888088e8f800 R15: ffffc9000685fa00 [ 1495.883094][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1495.883110][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1495.883123][ C0] CR2: 00007ffc2b160108 CR3: 0000000034498000 CR4: 00000000003526f0 [ 1495.883140][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1495.883152][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1495.883164][ C0] Call Trace: [ 1495.883171][ C0] [ 1495.883178][ C0] rt_spin_lock+0x16f/0x400 [ 1495.883200][ C0] ? __local_bh_enable+0x1e1/0x2f0 [ 1495.883227][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1495.883248][ C0] ? rcu_is_watching+0x15/0xb0 [ 1495.883267][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1495.883295][ C0] ? __batadv_dat_purge+0xae/0x400 [ 1495.883316][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1495.883359][ C0] __batadv_dat_purge+0x131/0x400 [ 1495.883381][ C0] ? __batadv_dat_purge+0xae/0x400 [ 1495.883402][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1495.883426][ C0] batadv_dat_purge+0x20/0x70 [ 1495.883445][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1495.883470][ C0] process_scheduled_works+0xb02/0x1830 [ 1495.883511][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.883540][ C0] ? assign_work+0x3d5/0x5e0 [ 1495.883567][ C0] worker_thread+0xa50/0xfc0 [ 1495.883609][ C0] kthread+0x388/0x470 [ 1495.883628][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1495.883652][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.883672][ C0] ret_from_fork+0x51e/0xb90 [ 1495.883700][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.883725][ C0] ? __switch_to+0xc7d/0x1450 [ 1495.883749][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.883768][ C0] ret_from_fork_asm+0x1a/0x30 [ 1495.883801][ C0] [ 1495.884824][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1495.884847][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1495.884876][ T37] Tainted: [L]=SOFTLOCKUP [ 1495.884884][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1495.884898][ T37] Call Trace: [ 1495.884908][ T37] [ 1495.884917][ T37] vpanic+0x56c/0xa60 [ 1495.884957][ T37] ? __pfx_vpanic+0x10/0x10 [ 1495.885002][ T37] panic+0xc5/0xd0 [ 1495.885036][ T37] ? __pfx_panic+0x10/0x10 [ 1495.885066][ T37] ? printk_trigger_flush+0x117/0x180 [ 1495.885108][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1495.885150][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1495.885177][ T37] watchdog+0x1023/0x1030 [ 1495.885208][ T37] ? watchdog+0x21a/0x1030 [ 1495.885240][ T37] kthread+0x388/0x470 [ 1495.885264][ T37] ? __pfx_watchdog+0x10/0x10 [ 1495.885295][ T37] ? __pfx_kthread+0x10/0x10 [ 1495.885319][ T37] ret_from_fork+0x51e/0xb90 [ 1495.885353][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.885385][ T37] ? __switch_to+0xc7d/0x1450 [ 1495.885417][ T37] ? __pfx_kthread+0x10/0x10 [ 1495.885443][ T37] ret_from_fork_asm+0x1a/0x30 [ 1495.885482][ T37] [ 1495.886085][ T37] Kernel Offset: disabled