last executing test programs: 11m14.491856199s ago: executing program 0 (id=158): syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0x6, 0xfe, 'e'}}}}}, &(0x7f0000000100)={0x801, 0x3, [0x719, 0x670, 0x31f, 0xbd6]}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000018140)) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) 11m14.062058564s ago: executing program 0 (id=162): accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xa7, "edf159a7502550712bcc36b055efcf3071cc7b11ac733c0c4387f4d676ffed12c7c0971a4d75e576eca43893903afee5432b69e9ce863084d6f25002d1c3df9a13ecba9188fefd2f78e681843e66844909416d22806e586564fc0652588bf3e2dbfb97f72adfb181a54ddff26a2ef5755e009838ad6067ad27a45b1a2fbf127093ac351bfad956aa28b400402495bcef8d289c20017ddbca3ef81d273a031235dddc7e0e4fd880"}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 11m13.020262919s ago: executing program 0 (id=167): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x4) timer_create(0xb, 0x0, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000040)) write$vhost_msg(r3, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x64, 0xc64, {0xffffffffffffffff}, {0xee01}, 0x6, 0xff}) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r5, 0x0, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe}) 11m11.341154484s ago: executing program 0 (id=170): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000180)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) fsmount(r0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m8.463733026s ago: executing program 0 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m5.350383746s ago: executing program 0 (id=186): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = eventfd(0xaa4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x0, 0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000ed100001000200000000000025812b8f0a", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/89, &(0x7f0000000480)=""/70, 0x100000}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 10m48.457939422s ago: executing program 32 (id=186): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = eventfd(0xaa4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x0, 0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000ed100001000200000000000025812b8f0a", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/89, &(0x7f0000000480)=""/70, 0x100000}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 8m18.531918786s ago: executing program 4 (id=598): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980902, 0xfffffff2, @value=0x9}) 8m17.028157946s ago: executing program 4 (id=599): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 8m15.992225892s ago: executing program 4 (id=607): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 8m15.628204392s ago: executing program 4 (id=610): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000080)={0x40, 0x23, 0xc, {0xc, 0x22, "93645ed68132c1fc8775"}}, 0x0}, 0x0) 8m14.623838445s ago: executing program 4 (id=613): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffcfc) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x7f, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) 8m12.630037691s ago: executing program 4 (id=617): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 7m56.756071643s ago: executing program 33 (id=617): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 14.966174576s ago: executing program 1 (id=1800): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0", 0x60}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.807849952s ago: executing program 1 (id=1801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) 12.452973399s ago: executing program 1 (id=1803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 11.31017499s ago: executing program 1 (id=1807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000000c}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 11.051654733s ago: executing program 1 (id=1808): lseek(0xffffffffffffffff, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 10.975019809s ago: executing program 3 (id=1809): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r0, &(0x7f0000000140)=[{0x0, 0x5d}, {&(0x7f0000000080)="d6", 0x1}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x5, 0x34, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) symlink(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.285048294s ago: executing program 5 (id=1812): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xfffffe10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r5, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c6adf2d78"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xe, 0x4, "ae7b9fc04a2bfb4e2190"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "32cb379dd8630298072a7d0c4c"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0f04c10f71"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048040}, 0x4008810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9, @ANYBLOB="6ff7010000040000"], 0x20}}, 0x4084) 9.283722831s ago: executing program 2 (id=1813): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x20000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, 0x0, 0xfffffffffffffd33) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100", 0x19) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0xfffffffffffffeae, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000180)={0x2, 0x2, 0xffff, 0x1000, 0x80, 0x6, 0x1b54ad26954492e7}) fcntl$setflags(r0, 0x2, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/72, 0x48}], 0x1) 7.483794553s ago: executing program 3 (id=1815): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="f21ac1c312888f2dc8cc24c56e09544ee0e62d6d423e7610bea301716617d822adb41b54cd2dff3b37", 0x29}], 0x1, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x840}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x1200002, &(0x7f00000002c0)='cache=none') 7.260761742s ago: executing program 2 (id=1817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.113428629s ago: executing program 3 (id=1818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000000c}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.008307742s ago: executing program 2 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}}, 0x0) 7.005952559s ago: executing program 6 (id=1820): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="8b67f73793fb7012824944a600410303160f627753b28c5500d914d4eedc5950be87f5d6337b34844dc2c407cb6ecf2e93fa3cefbdf0c1c2be09d4276433"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) sendto(0xffffffffffffffff, 0x0, 0x0, 0x2000c095, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}], 0x6}, 0x1}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x896, 0xf7f7, 0x3}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 6.819600018s ago: executing program 3 (id=1821): pipe2$watch_queue(&(0x7f0000000000), 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_settings={0x4, 0x1, @raw_hdlc=&(0x7f00000000c0)={0x3, 0x1}}}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 6.791689684s ago: executing program 2 (id=1822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x420, 0x230, 0x0, 0x0, 0x118, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x3}, [0xff, 0xffffffff, 0xff000000, 0xff0000ff], [0xffffff00, 0xffffff00, 0xff000000, 0xff], 'veth0_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x67, 0x6, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xb, 0x3, 0x1, [0xfffd, 0x0, 0x1, 0x7, 0x38, 0x9, 0x3, 0x0, 0xfff7, 0x7f, 0xee, 0x9a, 0x3, 0x9, 0x9, 0x1], 0xc}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0x0, 0x0, 0xff], [0xff000000, 0xff000000], 'macvtap0\x00', 'veth0_vlan\x00', {}, {}, 0x29, 0x80, 0x2, 0x42}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@empty, 0x2d, 0x32, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x77}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x46, 0x80, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xff], 'syzkaller0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x7a, 0x78, 0x2, 0x42}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000005}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="040100001000010400400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000bc00128009000100766c616e00000000ac00028004000480280004800c000100000001000100000086fd010000080000080000000c0001000100000009fe0000100003800c00010000020000ff000000580003800c00010002000000020000000c000100ffffff7f000200000c000100ff0f0000040000000c00010009000000000001000c00010000000000070000000c000100ffffffff000200000c000104b90a0000ff07000006000500810000000c0002000a000000f7ffffff13000300766c616e30"], 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2c}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000200)=0x6, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) io_uring_setup(0x724c, &(0x7f0000000380)={0x0, 0x8b39, 0x8, 0x3, 0x1f8}) 6.791217664s ago: executing program 6 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r1, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) sched_getparam(r0, &(0x7f0000000280)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) socket(0x1000000000000010, 0x80802, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone3(&(0x7f00000003c0)={0x20000000, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000240)=""/26, 0x1a, &(0x7f0000000300)=""/79, &(0x7f0000000380)=[r4, r4, r4], 0x3}, 0x58) 6.751123034s ago: executing program 5 (id=1824): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0", 0x60}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.354116728s ago: executing program 3 (id=1825): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r0, &(0x7f0000000140)=[{0x0, 0x5d}, {&(0x7f0000000080)="d6", 0x1}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x5, 0x34, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) symlink(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.055421511s ago: executing program 5 (id=1826): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d001080"], 0x184}}, 0x40000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.559268377s ago: executing program 5 (id=1827): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x20000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, 0x0, 0xfffffffffffffd33) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100", 0x19) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0xfffffffffffffeae, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000180)={0x2, 0x2, 0xffff, 0x1000, 0x80, 0x6, 0x1b54ad26954492e7}) fcntl$setflags(r0, 0x2, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') readv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/72, 0x48}], 0x1) 1.963087821s ago: executing program 6 (id=1828): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="f21ac1c312888f2dc8cc24c56e09544ee0e62d6d423e7610bea301716617d822adb41b54cd2dff3b37", 0x29}], 0x1, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x840}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x1200002, &(0x7f00000002c0)='cache=none') 897.708853ms ago: executing program 2 (id=1829): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000200)=@v2={0x5, 0x3, 0x6, 0x3}, 0x9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 878.403853ms ago: executing program 6 (id=1830): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880033000000000000000000000001ac14142500"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x400c041) 595.632229ms ago: executing program 5 (id=1831): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 492.999657ms ago: executing program 3 (id=1832): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/238, 0xee) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$HIDIOCSREPORT(r4, 0x4018480c, 0x0) ioctl$HIDIOCGPHYS(r4, 0x80404812, 0x0) syz_open_dev$hiddev(&(0x7f00000010c0), 0x4, 0x200) 457.683156ms ago: executing program 6 (id=1833): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 315.796249ms ago: executing program 1 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x834, 0x1, [0x2, 0x8, 0x0, 0x6, 0xf], [0x109, 0x81, 0x0, 0x0, 0x6, 0x3, 0x81, 0xe4, 0x5f1, 0xff, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x7, 0x7, 0x6, 0x6, 0x2, 0xe15, 0xad, 0xfffffffffffffffe, 0x6, 0xcdd7, 0x2, 0x7, 0x0, 0x3ff, 0x1, 0x9, 0x7, 0x80000000, 0x8, 0x6, 0x4d1f, 0x9, 0xfffffffffffffff0, 0x0, 0x1000000000000000, 0x5c, 0x6, 0x3ff, 0xa, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x2, 0x6, 0x1, 0x5, 0x80, 0x0, 0x9, 0x3ff, 0x8, 0x7fffffff, 0x8, 0x0, 0x9, 0x2, 0x1, 0x3147, 0x79c, 0x9, 0x4, 0xa18, 0x1, 0x6, 0x8, 0x1, 0x9, 0x4, 0x0, 0xfffffffffffffffa, 0xbf0b72b, 0x18, 0x4, 0x93f8, 0xffff, 0x800, 0xa06a, 0x2, 0x0, 0x461e, 0xb05, 0x3, 0x1, 0x4, 0x7, 0xfffffffffffffff8, 0x8, 0x2, 0xfffffffffffffff7, 0x6, 0x4, 0x0, 0x1, 0x22f, 0x6, 0x3, 0x0, 0x800, 0xfffffffffffffff6, 0x800000000, 0xf42b, 0x75, 0x3, 0x9, 0x1, 0xf0, 0x6, 0x8001, 0x7, 0x6, 0x8, 0xaf]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r4, &(0x7f0000000280)=@can, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) 77.698282ms ago: executing program 6 (id=1835): pipe2$watch_queue(&(0x7f0000000000), 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_settings={0x4, 0x1, @raw_hdlc=&(0x7f00000000c0)={0x3, 0x1}}}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 57.076306ms ago: executing program 5 (id=1836): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0", 0x60}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29", 0x92}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=1837): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) kernel console output (not intermixed with test programs): T9] usb 4-1: unsupported MDLM descriptors [ 511.265684][ T9453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.283311][ T9460] Illegal XDP return value 4294967294 on prog (id 38) dev syz_tun, expect packet loss! [ 511.502017][ T6937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 511.653074][ T6937] usb 3-1: Using ep0 maxpacket: 16 [ 511.660537][ T6937] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 511.660562][ T6937] usb 3-1: config 0 has no interface number 0 [ 511.660604][ T6937] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 511.660630][ T6937] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid maxpacket 15053, setting to 1024 [ 511.660656][ T6937] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 511.726725][ T6937] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 511.726752][ T6937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.726772][ T6937] usb 3-1: Product: syz [ 511.726786][ T6937] usb 3-1: Manufacturer: syz [ 511.726800][ T6937] usb 3-1: SerialNumber: syz [ 511.921326][ T6937] usb 3-1: config 0 descriptor?? [ 511.932258][ T9459] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 511.932428][ T9459] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 512.734140][ T9480] netlink: 'syz.5.949': attribute type 7 has an invalid length. [ 513.207629][ T6938] usb 4-1: USB disconnect, device number 17 [ 513.714608][ T6937] usb 3-1: USB disconnect, device number 20 [ 513.964606][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.964804][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.965375][ T9340] bridge_slave_0: entered allmulticast mode [ 513.998024][ T9340] bridge_slave_0: entered promiscuous mode [ 514.072259][ T6938] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 514.221980][ T6938] usb 4-1: Using ep0 maxpacket: 32 [ 514.247996][ T6938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.261372][ T6938] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 514.276543][ T6938] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 514.276569][ T6938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.276589][ T6938] usb 4-1: Product: syz [ 514.276603][ T6938] usb 4-1: Manufacturer: syz [ 514.276616][ T6938] usb 4-1: SerialNumber: syz [ 514.442736][ T6483] bridge_slave_1: left allmulticast mode [ 514.442835][ T6483] bridge_slave_1: left promiscuous mode [ 514.468575][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.545530][ T9509] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 514.545543][ T9509] ALSA: mixer_oss: invalid index 1374389 [ 514.577830][ T6483] bridge_slave_0: left allmulticast mode [ 514.577973][ T6483] bridge_slave_0: left promiscuous mode [ 514.578508][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.161794][ T6938] usb 4-1: Fast Track Pro switching to config #2 [ 516.212470][ T5729] net_ratelimit: 24 callbacks suppressed [ 516.212487][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.216810][ T6938] usb 4-1: USB disconnect, device number 18 [ 517.130220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.330042][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.982631][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.062581][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.090536][ T6483] bond0 (unregistering): Released all slaves [ 518.092211][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 518.142940][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.143021][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.143952][ T9340] bridge_slave_1: entered allmulticast mode [ 518.145753][ T9340] bridge_slave_1: entered promiscuous mode [ 518.170131][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 518.374185][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.375299][ T9] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 518.375323][ T9] usb 6-1: config 114 has no interface number 0 [ 518.375364][ T9] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 518.375389][ T9] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 518.375414][ T9] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 518.375437][ T9] usb 6-1: config 114 interface 240 has no altsetting 0 [ 518.379014][ T9] usb 6-1: string descriptor 0 read error: -22 [ 518.379135][ T9] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 518.379157][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.435016][ T9520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.436082][ T9520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.485016][ T9] ir_usb 6-1:114.240: IR Dongle converter detected [ 518.548604][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.630500][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.646342][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.694201][ T9] usb 6-1: IRDA class descriptor not found, device not bound [ 518.895482][ T9] usb 6-1: USB disconnect, device number 14 [ 519.248412][ T9532] overlayfs: missing 'lowerdir' [ 519.920074][ T9340] team0: Port device team_slave_0 added [ 519.925136][ T9340] team0: Port device team_slave_1 added [ 520.596822][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.640119][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.862048][ T5740] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 521.014218][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 521.014810][ T5740] usb 3-1: not running at top speed; connect to a high speed hub [ 521.016144][ T5740] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.016196][ T5740] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.016225][ T5740] usb 3-1: config 1 interface 0 has no altsetting 0 [ 521.018685][ T5740] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 521.018714][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.018735][ T5740] usb 3-1: Product: syz [ 521.018756][ T5740] usb 3-1: Manufacturer: syz [ 521.018767][ T5740] usb 3-1: SerialNumber: syz [ 521.165806][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.165820][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.165842][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.171750][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.171763][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.171788][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.382291][ T5740] usb 3-1: USB disconnect, device number 21 [ 521.687023][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.772032][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 521.782213][ T6483] hsr_slave_0: left promiscuous mode [ 521.814501][ T6483] hsr_slave_1: left promiscuous mode [ 521.815513][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.815536][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.863137][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.863160][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.913061][ T6483] veth1_macvtap: left promiscuous mode [ 521.914004][ T6483] veth0_macvtap: left promiscuous mode [ 521.914151][ T6483] veth1_vlan: left promiscuous mode [ 521.914307][ T6483] veth0_vlan: left promiscuous mode [ 521.922226][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 521.940594][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 521.957665][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 521.970000][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 521.970018][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.970030][ T9] usb 6-1: Product: syz [ 521.970039][ T9] usb 6-1: Manufacturer: syz [ 521.970049][ T9] usb 6-1: SerialNumber: syz [ 523.364584][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.633186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.690477][ T9] usb 6-1: Fast Track Pro switching to config #2 [ 523.723892][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.736790][ T9] usb 6-1: USB disconnect, device number 15 [ 523.809454][ T8290] udevd[8290]: setting mode of /dev/bus/usb/006/015 to 020664 failed: No such file or directory [ 523.809578][ T8290] udevd[8290]: setting owner of /dev/bus/usb/006/015 to uid=0, gid=0 failed: No such file or directory [ 523.828455][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.015137][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.016306][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.119838][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.417930][ T6483] team0 (unregistering): Port device team_slave_1 removed [ 524.871581][ T9572] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 524.874776][ T9572] ALSA: mixer_oss: invalid index 1374389 [ 524.973968][ T6483] team0 (unregistering): Port device team_slave_0 removed [ 525.002219][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.352196][ T9563] macsec1: entered promiscuous mode [ 525.352219][ T9563] bridge0: entered promiscuous mode [ 525.527813][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.752757][ T9340] hsr_slave_0: entered promiscuous mode [ 525.753998][ T9340] hsr_slave_1: entered promiscuous mode [ 525.755000][ T9340] debugfs: 'hsr0' already exists in 'hsr' [ 525.755023][ T9340] Cannot create hsr debugfs directory [ 530.364837][ T5729] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 530.614477][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 530.619790][ T5729] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 530.619838][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.619862][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 530.619887][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.637223][ T5729] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 530.637254][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.637279][ T5729] usb 3-1: Product: syz [ 530.637315][ T5729] usb 3-1: Manufacturer: syz [ 530.637357][ T5729] usb 3-1: SerialNumber: syz [ 530.722730][ T5729] usb 3-1: config 0 descriptor?? [ 530.726243][ T9597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.966464][ T5729] appledisplay: Apple Cinema Display connected [ 531.319400][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 531.366369][ T9616] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 531.366385][ T9616] ALSA: mixer_oss: invalid index 1374389 [ 531.462564][ T9] usb 3-1: USB disconnect, device number 22 [ 531.462672][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 531.507074][ T9] appledisplay: Apple Cinema Display disconnected [ 531.788680][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 531.880745][ T9629] ALSA: mixer_oss: invalid OSS volume '' [ 532.786676][ T9659] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 532.786721][ T9659] ALSA: mixer_oss: invalid index 1374389 [ 533.772355][ T5722] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 534.071297][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.082757][ T5722] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 534.082783][ T5722] usb 3-1: config 114 has no interface number 0 [ 534.082839][ T5722] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 534.082855][ T5722] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 534.082872][ T5722] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 534.082888][ T5722] usb 3-1: config 114 interface 240 has no altsetting 0 [ 534.088587][ T5722] usb 3-1: string descriptor 0 read error: -22 [ 534.088699][ T5722] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 534.088715][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.189549][ T9644] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.189671][ T9644] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.245427][ T9664] fuse: Bad value for 'fd' [ 534.265648][ T5722] ir_usb 3-1:114.240: IR Dongle converter detected [ 534.405742][ T5722] usb 3-1: IRDA class descriptor not found, device not bound [ 534.712570][ T6937] usb 3-1: USB disconnect, device number 23 [ 535.947471][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.948149][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.002554][ T9672] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.996'. [ 536.270556][ T9674] netlink: 184 bytes leftover after parsing attributes in process `syz.2.998'. [ 536.631406][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.660198][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.479063][ T66] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.479098][ T66] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.481128][ T66] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.481156][ T66] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.481191][ T66] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.481216][ T66] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.481249][ T66] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.481273][ T66] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.735797][ T9685] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 537.821679][ T9689] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 537.821696][ T9689] ALSA: mixer_oss: invalid index 1374389 [ 537.857577][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1000'. [ 537.978566][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1004'. [ 538.333227][ T9693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.376610][ T9718] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1009'. [ 540.953731][ T9723] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1010'. [ 543.070064][ T9746] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 543.070079][ T9746] ALSA: mixer_oss: invalid index 1374389 [ 543.146273][ T9749] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 543.259893][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 543.274303][ T9340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 543.316756][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.321877][ T9756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.365948][ T9340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 543.410156][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.411779][ T9340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 543.485241][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.486314][ T9340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 543.599242][ T9340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.646991][ T9763] 9p: Bad value for 'rfdno' [ 543.888299][ T9778] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1022'. [ 543.962120][ T5709] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 544.112127][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 544.114611][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.114664][ T5709] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 544.114690][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.179086][ T5709] usb 3-1: config 0 descriptor?? [ 544.230121][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.591275][ T9340] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.655327][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.655465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.789534][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.789663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.868349][ T5709] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 544.892550][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.893359][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.366730][ T9800] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 547.458607][ T9823] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 547.459104][ T9823] ALSA: mixer_oss: invalid index 1374389 [ 548.229986][ T5709] usb 3-1: USB disconnect, device number 24 [ 552.120382][ T9857] fuse: Bad value for 'fd' [ 552.333576][ T9863] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 552.593525][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.953455][ T9340] veth0_vlan: entered promiscuous mode [ 557.995261][ T9340] veth1_vlan: entered promiscuous mode [ 558.159533][ T9340] veth0_macvtap: entered promiscuous mode [ 558.213093][ T9340] veth1_macvtap: entered promiscuous mode [ 558.268219][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.461040][ T9340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.643015][ T3306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.645644][ T3306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.647202][ T3306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.657475][ T3306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.754904][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.790675][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.888075][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 561.906627][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 561.909393][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.168557][ T9936] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 562.168573][ T9936] ALSA: mixer_oss: invalid index 1374389 [ 562.804378][ T9950] netlink: 'syz.5.1057': attribute type 1 has an invalid length. [ 562.865956][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.866016][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.889834][ T9954] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1057'. [ 562.997361][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1057'. [ 564.171610][ T59] Bluetooth: hci3: command tx timeout [ 564.656237][ T9969] trusted_key: encrypted_key: insufficient parameters specified [ 566.033357][ T9950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.247497][ T9978] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 566.247559][ T9978] ALSA: mixer_oss: invalid index 1374389 [ 566.287898][ T59] Bluetooth: hci3: command tx timeout [ 568.204027][ T9983] ceph: No mds server is up or the cluster is laggy [ 568.382063][ T59] Bluetooth: hci3: command tx timeout [ 568.724632][T10002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1071'. [ 569.006668][ T3439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.062072][ T5729] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 569.062373][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 569.212185][ T5729] usb 3-1: device descriptor read/64, error -32 [ 569.317454][T10010] netlink: 'syz.5.1074': attribute type 1 has an invalid length. [ 569.845026][ T6937] IPVS: starting estimator thread 0... [ 569.972944][ T5729] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 570.383343][T10010] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1074'. [ 570.387582][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 570.402504][T10014] IPVS: using max 8 ests per chain, 19200 per kthread [ 570.420132][T10010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.437806][ T5729] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.437835][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.437855][ T5729] usb 3-1: Product: syz [ 570.437869][ T5729] usb 3-1: Manufacturer: syz [ 570.437883][ T5729] usb 3-1: SerialNumber: syz [ 570.478173][ T59] Bluetooth: hci3: command tx timeout [ 571.241829][ T3439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.746106][T10026] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 571.746124][T10026] ALSA: mixer_oss: invalid index 1374389 [ 571.882383][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 571.882430][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.883009][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.968388][ T5729] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 571.990271][ T5729] usb 3-1: USB disconnect, device number 26 [ 572.308860][ T3439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.837644][ T3439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.975664][T10062] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 574.975691][T10062] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 574.975778][T10062] vhci_hcd vhci_hcd.0: Device attached [ 575.181169][T10063] vhci_hcd: connection closed [ 575.227264][ T12] vhci_hcd vhci_hcd.5: stop threads [ 575.227290][ T12] vhci_hcd vhci_hcd.5: release socket [ 575.227324][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 575.312173][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.312247][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.312387][ T9926] bridge_slave_0: entered allmulticast mode [ 575.320405][ T9926] bridge_slave_0: entered promiscuous mode [ 575.354931][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.355267][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.355790][ T9926] bridge_slave_1: entered allmulticast mode [ 575.394113][ T9926] bridge_slave_1: entered promiscuous mode [ 575.881115][T10072] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.1090'. [ 575.900297][T10072] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 576.252334][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.280206][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.311107][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.472394][T10079] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 576.472411][T10079] ALSA: mixer_oss: invalid index 1374389 [ 576.979543][ T9926] team0: Port device team_slave_0 added [ 577.050203][ T9926] team0: Port device team_slave_1 added [ 577.193211][T10085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1095'. [ 577.448131][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.448142][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.448161][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.650053][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.650065][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.650083][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.752052][ T5740] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 577.835433][ T3439] bridge_slave_1: left allmulticast mode [ 577.835461][ T3439] bridge_slave_1: left promiscuous mode [ 577.835655][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.893027][ T3439] bridge_slave_0: left allmulticast mode [ 577.893051][ T3439] bridge_slave_0: left promiscuous mode [ 577.893266][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.922731][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 577.948446][ T5740] usb 3-1: not running at top speed; connect to a high speed hub [ 577.954951][ T5740] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 577.955062][ T5740] usb 3-1: config 1 interface 0 has no altsetting 0 [ 577.982643][ T5740] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 577.982683][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.982698][ T5740] usb 3-1: Product: syz [ 577.982709][ T5740] usb 3-1: Manufacturer: syz [ 577.982720][ T5740] usb 3-1: SerialNumber: syz [ 578.223060][T10096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 578.223084][T10096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 578.223148][T10096] vhci_hcd vhci_hcd.0: Device attached [ 578.753902][T10097] vhci_hcd: connection closed [ 578.759817][ T5740] usb 3-1: USB disconnect, device number 27 [ 578.778063][ T6483] vhci_hcd vhci_hcd.1: stop threads [ 578.778087][ T6483] vhci_hcd vhci_hcd.1: release socket [ 578.778155][ T6483] vhci_hcd vhci_hcd.1: disconnect device [ 580.277726][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 581.412896][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.504272][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.555209][ T3439] bond0 (unregistering): Released all slaves [ 582.297092][T10119] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 582.297108][T10119] ALSA: mixer_oss: invalid index 1374389 [ 582.558059][T10122] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1105'. [ 582.899975][ T3439] hsr_slave_0: left promiscuous mode [ 583.158239][ T3439] hsr_slave_1: left promiscuous mode [ 583.490954][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.491016][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.044592][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.044747][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.576652][T10133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 584.576684][T10133] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 584.576752][T10133] vhci_hcd vhci_hcd.0: Device attached [ 584.934021][T10135] vhci_hcd: connection closed [ 585.029518][ T6483] vhci_hcd vhci_hcd.5: stop threads [ 585.030698][ T6483] vhci_hcd vhci_hcd.5: release socket [ 585.115440][ T6483] vhci_hcd vhci_hcd.5: disconnect device [ 586.874961][T10151] fuse: Bad value for 'fd' [ 587.094186][ T3439] veth1_macvtap: left promiscuous mode [ 587.094289][ T3439] veth0_macvtap: left promiscuous mode [ 587.094561][ T3439] veth1_vlan: left promiscuous mode [ 587.094729][ T3439] veth0_vlan: left promiscuous mode [ 587.355086][T10161] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 587.355101][T10161] ALSA: mixer_oss: invalid index 1374389 [ 587.450795][T10163] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1116'. [ 588.183848][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 588.242757][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 588.470728][ T9926] hsr_slave_0: entered promiscuous mode [ 588.471787][ T9926] hsr_slave_1: entered promiscuous mode [ 588.490092][ T9926] debugfs: 'hsr0' already exists in 'hsr' [ 588.490111][ T9926] Cannot create hsr debugfs directory [ 589.055313][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 589.920153][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.181760][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.194629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.204515][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.217021][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.262484][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.271759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.280557][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.283825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.289571][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.349462][T10173] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 590.349553][T10173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 590.390375][T10173] vhci_hcd vhci_hcd.0: Device attached [ 590.773684][T10177] vhci_hcd: connection closed [ 590.856719][ T91] vhci_hcd vhci_hcd.2: stop threads [ 590.856745][ T91] vhci_hcd vhci_hcd.2: release socket [ 591.037250][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 591.695844][ T9] usb usb38-port1: attempt power cycle [ 592.353587][T10196] fuse: Bad value for 'fd' [ 592.430861][ T9] usb usb38-port1: unable to enumerate USB device [ 592.978598][T10205] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 592.978616][T10205] ALSA: mixer_oss: invalid index 1374389 [ 593.697490][T10210] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1127'. [ 594.354959][T10225] tc_dump_action: action bad kind [ 597.252428][ T5729] net_ratelimit: 2045 callbacks suppressed [ 597.252446][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.254530][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.836336][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 599.559400][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.588284][T10258] fuse: Bad value for 'fd' [ 601.438594][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.542303][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.732006][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.812098][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.184513][T10286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1145'. [ 603.836389][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.850858][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.851700][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.932119][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.477344][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.931475][ T9926] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.110798][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.043119][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.060008][ T9926] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 606.147588][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.442990][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.467330][ T9926] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 606.569937][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.584690][ T9926] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 606.627743][ T9926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.779114][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.850480][ T9926] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.883566][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.883822][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.925144][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.925245][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.193692][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.513346][T10341] fuse: Bad value for 'fd' [ 608.939277][T10356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1156'. [ 608.953374][ T36] net_ratelimit: 1 callbacks suppressed [ 609.157867][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.982551][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.175426][T10374] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 610.232036][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 610.297196][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 610.610972][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.200879][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.601589][T10380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.301966][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.583014][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.442183][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.797968][T10412] fuse: Bad value for 'fd' [ 615.690207][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.964533][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.221632][T10431] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 616.287260][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 616.333239][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1172'. [ 616.351747][T10431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.470906][T10440] 9p: Bad value for 'wfdno' [ 617.758723][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.812126][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.907489][ T9926] veth0_vlan: entered promiscuous mode [ 618.862578][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.456394][ T9926] veth1_vlan: entered promiscuous mode [ 619.752271][ T9926] veth0_macvtap: entered promiscuous mode [ 619.759947][ T9926] veth1_macvtap: entered promiscuous mode [ 619.811353][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.055571][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.558047][T10470] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1183'. [ 620.782280][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.870225][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.927802][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.929783][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.966331][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.968614][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.156670][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.222073][ T5729] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 621.396719][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 621.399277][ T5729] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 621.399332][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.399361][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 621.399391][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 621.407234][ T5729] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 621.407273][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.407374][ T5729] usb 3-1: Product: syz [ 621.407409][ T5729] usb 3-1: Manufacturer: syz [ 621.407455][ T5729] usb 3-1: SerialNumber: syz [ 621.547065][ T5729] usb 3-1: config 0 descriptor?? [ 621.548055][T10473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 621.661113][T10486] fuse: Bad value for 'fd' [ 621.743227][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.854071][ T5729] appledisplay: Apple Cinema Display connected [ 622.126660][ T5729] usb 3-1: USB disconnect, device number 28 [ 622.126741][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 622.146872][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.193079][ T5729] appledisplay: Apple Cinema Display disconnected [ 623.425515][ T59] Bluetooth: hci2: command tx timeout [ 623.472854][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.654738][T10504] 9p: Bad value for 'wfdno' [ 623.823201][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.097184][T10515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1195'. [ 624.427900][T10526] fuse: Bad value for 'fd' [ 624.451321][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.451390][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.384931][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.514227][ T59] Bluetooth: hci2: command tx timeout [ 625.642029][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 625.860867][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 625.860898][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.860917][ T9] usb 3-1: Product: syz [ 625.860939][ T9] usb 3-1: Manufacturer: syz [ 625.860950][ T9] usb 3-1: SerialNumber: syz [ 626.308857][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 626.308916][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 626.361604][T10540] 9p: Bad value for 'rfdno' [ 626.472628][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.953269][ T59] Bluetooth: hci2: command tx timeout [ 627.954306][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.013335][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 628.013388][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 628.028225][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.035584][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 628.087234][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 628.143029][ T9] usb 3-1: USB disconnect, device number 29 [ 628.265026][T10558] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1209'. [ 628.318193][T10563] fuse: Bad value for 'fd' [ 628.736490][T10569] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 628.736535][T10569] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 628.767345][T10569] vhci_hcd vhci_hcd.0: Device attached [ 628.847257][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.851565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.854256][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.857201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.514257][T10570] vhci_hcd: connection closed [ 629.573637][ T3306] vhci_hcd vhci_hcd.2: stop threads [ 629.573710][ T3306] vhci_hcd vhci_hcd.2: release socket [ 629.679426][ T3306] vhci_hcd vhci_hcd.2: disconnect device [ 629.733538][ T9] usb 38-1: enqueue for inactive port 0 [ 629.993363][ T59] Bluetooth: hci2: command tx timeout [ 630.134512][T10572] netlink: 'syz.2.1211': attribute type 12 has an invalid length. [ 630.213830][T10578] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1214'. [ 630.454671][ T9] usb usb38-port1: attempt power cycle [ 630.475106][T10581] 9p: Bad value for 'rfdno' [ 631.035234][ T9] usb usb38-port1: unable to enumerate USB device [ 631.086934][T10593] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1220'. [ 631.102373][ T9] net_ratelimit: 298 callbacks suppressed [ 631.102392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.112905][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.432392][T10601] fuse: Bad value for 'fd' [ 631.542011][ T5709] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 631.692020][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 631.692308][ T1182] bridge_slave_1: left allmulticast mode [ 631.692335][ T1182] bridge_slave_1: left promiscuous mode [ 631.692950][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.699246][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 631.733899][ T5709] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 631.768756][ T5709] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 631.768783][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.768802][ T5709] usb 3-1: Product: syz [ 631.768815][ T5709] usb 3-1: Manufacturer: syz [ 631.768829][ T5709] usb 3-1: SerialNumber: syz [ 631.825199][ T1182] bridge_slave_0: left allmulticast mode [ 631.825294][ T1182] bridge_slave_0: left promiscuous mode [ 631.825683][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.991757][T10615] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1225'. [ 633.580965][ T5709] usb 3-1: Fast Track Pro switching to config #2 [ 633.605627][ T5709] usb 3-1: USB disconnect, device number 30 [ 633.673425][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.911961][T10620] 9p: Bad value for 'rfdno' [ 634.142193][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.219526][T10629] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1231'. [ 634.751949][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.864853][ T1182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.076404][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.205029][ T1182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.230398][ T1182] bond0 (unregistering): Released all slaves [ 637.038896][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.039011][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.039217][T10471] bridge_slave_0: entered allmulticast mode [ 637.069913][T10471] bridge_slave_0: entered promiscuous mode [ 637.080176][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.088538][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.089005][T10471] bridge_slave_1: entered allmulticast mode [ 637.103224][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.128286][T10471] bridge_slave_1: entered promiscuous mode [ 637.184944][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.133459][T10654] 9p: Bad value for 'rfdno' [ 638.466586][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.534921][ T1182] hsr_slave_0: left promiscuous mode [ 638.653319][ T1182] hsr_slave_1: left promiscuous mode [ 638.654563][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.654591][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.849127][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.111743][ T1182] veth1_macvtap: left promiscuous mode [ 639.120440][ T1182] veth0_macvtap: left promiscuous mode [ 639.143164][ T1182] veth1_vlan: left promiscuous mode [ 639.143350][ T1182] veth0_vlan: left promiscuous mode [ 639.155347][T10673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1246'. [ 639.442353][ T36] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 639.502501][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.537390][ T36] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 640.537420][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.537440][ T36] usb 3-1: Product: syz [ 640.537453][ T36] usb 3-1: Manufacturer: syz [ 640.537466][ T36] usb 3-1: SerialNumber: syz [ 640.636512][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.647604][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.933342][T10687] fuse: Bad value for 'fd' [ 641.077496][ T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 641.077555][ T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 641.672868][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.163911][ T1182] team0 (unregistering): Port device team_slave_1 removed [ 642.223706][ T1182] team0 (unregistering): Port device team_slave_0 removed [ 642.703416][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.777796][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.855935][ T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 642.855991][ T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 642.891042][ T36] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 642.913434][ T36] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 642.926011][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.970478][ T36] usb 3-1: USB disconnect, device number 31 [ 643.169982][T10471] team0: Port device team_slave_0 added [ 643.559663][T10471] team0: Port device team_slave_1 added [ 644.095106][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.095151][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.095206][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.148913][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.148928][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.148955][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.246463][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.369489][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.545956][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.648876][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.649611][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.650283][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.650463][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.650858][T10717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.789298][T10471] hsr_slave_0: entered promiscuous mode [ 644.790539][T10471] hsr_slave_1: entered promiscuous mode [ 644.791305][T10471] debugfs: 'hsr0' already exists in 'hsr' [ 644.791333][T10471] Cannot create hsr debugfs directory [ 644.905600][T10727] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 644.905617][T10727] ALSA: mixer_oss: invalid index 1374389 [ 645.172078][T10735] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 645.322018][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'. [ 646.514809][T10735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.772120][ T6937] net_ratelimit: 56 callbacks suppressed [ 647.772143][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.783326][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.544757][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.545090][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.834757][T10769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1270'. [ 651.023810][T10776] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 651.023826][T10776] ALSA: mixer_oss: invalid index 1374389 [ 651.164779][T10778] 9p: Bad value for 'rfdno' [ 651.345695][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 651.582412][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.514536][T10793] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 652.678684][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.754729][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 654.192931][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.291030][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.830216][T10798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.432746][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.481301][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.717736][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 657.504734][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.704789][T10840] 9p: Bad value for 'rfdno' [ 658.545464][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.751271][T10848] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 658.751285][T10848] ALSA: mixer_oss: invalid index 1374389 [ 659.504186][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.852222][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.024925][T10856] netlink: 'syz.5.1290': attribute type 1 has an invalid length. [ 660.147986][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1290'. [ 661.363123][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.519269][T10874] macsec1: left promiscuous mode [ 661.552518][T10856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.632214][T10883] 9p: Bad value for 'rfdno' [ 661.764616][ T91] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.819257][ T91] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.845365][T10886] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 661.845384][T10886] ALSA: mixer_oss: invalid index 1374389 [ 661.881173][ T91] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 661.939376][ T91] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 662.563380][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.852972][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.918538][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.349501][T10910] fuse: Bad value for 'fd' [ 664.594607][T10916] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 664.710474][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1307'. [ 664.805188][T10922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.154947][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.157410][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.027692][T10938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.064544][T10938] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.277092][T10938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.565119][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.710589][T10938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.713269][T10938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.717670][T10938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 668.717688][T10938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.722144][T10938] veth1_vlan: left promiscuous mode [ 668.723239][T10938] veth0_vlan: left promiscuous mode [ 668.724110][T10938] veth0_vlan: entered promiscuous mode [ 668.726994][T10938] veth1_vlan: entered promiscuous mode [ 668.731241][T10938] veth1_macvtap: left promiscuous mode [ 668.732345][T10938] veth0_macvtap: left promiscuous mode [ 668.733391][T10938] veth0_macvtap: entered promiscuous mode [ 668.734323][T10938] veth1_macvtap: entered promiscuous mode [ 668.738945][T10938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.739805][T10938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.740624][T10938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.741540][T10938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.747617][T10938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.006547][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.006992][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.040638][T10945] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 669.040651][T10945] ALSA: mixer_oss: invalid index 1374389 [ 669.108259][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.108405][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.182959][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.401213][ T66] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.401246][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.401271][ T66] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 669.657387][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.753090][ T66] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.753162][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.753188][ T66] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 670.598918][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1320'. [ 670.599064][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1320'. [ 670.599102][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1320'. [ 670.599141][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 670.809689][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.002598][ T66] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.002634][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.002664][ T66] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 671.019592][ T66] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.019664][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.019744][ T66] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 671.538709][T10988] 9p: Bad value for 'rfdno' [ 671.595961][T10979] block nbd3: not configured, cannot reconfigure [ 671.840173][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.008003][T10471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 672.050000][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.061631][T10471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 672.105747][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.108906][T10471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 672.222120][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.260566][T11003] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 672.260580][T11003] ALSA: mixer_oss: invalid index 1374389 [ 672.841455][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.862644][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.878532][T10471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.033829][T10471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.831705][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1332'. [ 674.831739][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1332'. [ 674.831754][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 674.831768][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 675.708615][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.866298][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.868138][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.239907][T11035] 9p: Bad value for 'wfdno' [ 676.483270][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.534420][T10471] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.558086][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.558201][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.610220][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.610337][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.696421][T11047] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 676.696435][T11047] ALSA: mixer_oss: invalid index 1374389 [ 677.381666][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.277744][T11070] 9p: Bad value for 'rfdno' [ 678.420961][T11074] 9p: Bad value for 'wfdno' [ 678.551965][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.152883][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.260572][T11084] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 679.260587][T11084] ALSA: mixer_oss: invalid index 1374389 [ 679.632612][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.305379][T11110] 9p: Bad value for 'rfdno' [ 680.566027][T11118] 9p: Bad value for 'wfdno' [ 680.713025][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.066317][T11127] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 681.066492][T11127] ALSA: mixer_oss: invalid index 1374389 [ 681.753003][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.127366][T11149] 9p: Bad value for 'rfdno' [ 682.222111][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.377694][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.419357][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.308959][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.390840][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.409733][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.411088][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.432213][T11165] fuse: Bad value for 'fd' [ 684.504538][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.055298][T11177] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 685.055373][T11177] ALSA: mixer_oss: invalid index 1374389 [ 685.422523][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.601573][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.745694][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.745752][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.046613][ T59] Bluetooth: hci3: command tx timeout [ 687.186049][ T37] kauditd_printk_skb: 347 callbacks suppressed [ 687.186111][ T37] audit: type=1326 audit(1779046233.106:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.5.1381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4e33ace59 code=0x0 [ 687.243103][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.243249][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.126301][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 689.009473][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.071213][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 689.112214][ T59] Bluetooth: hci3: command tx timeout [ 689.262808][ T6937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 689.384056][T11223] fuse: Bad value for 'fd' [ 689.411976][ T6937] usb 3-1: Using ep0 maxpacket: 32 [ 689.413979][ T6937] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 689.416402][ T6937] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.416431][ T6937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.416454][ T6937] usb 3-1: Product: syz [ 689.416469][ T6937] usb 3-1: Manufacturer: syz [ 689.416496][ T6937] usb 3-1: SerialNumber: syz [ 689.492229][ T6937] usb 3-1: config 0 descriptor?? [ 689.496081][ T6937] cdc_ether 3-1:0.0: Descriptor too short [ 689.500153][ T6937] usb 3-1: unsupported MDLM descriptors [ 690.072441][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.188963][T11235] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.325225][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.864281][ T9] usb 3-1: USB disconnect, device number 32 [ 691.236764][ T59] Bluetooth: hci3: command tx timeout [ 691.255104][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.393224][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.561193][ T43] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.703758][ T43] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.721500][ T3197] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 692.749553][ T3197] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 693.272580][ T59] Bluetooth: hci3: command tx timeout [ 693.529707][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.542548][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.933837][T11276] fuse: Bad value for 'fd' [ 694.236515][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 695.352211][ T5709] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 695.401492][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.502153][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 695.505747][ T5709] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 695.530383][ T5709] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 695.530407][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.530426][ T5709] usb 3-1: Product: syz [ 695.530439][ T5709] usb 3-1: Manufacturer: syz [ 695.530453][ T5709] usb 3-1: SerialNumber: syz [ 695.587234][ T5709] usb 3-1: config 0 descriptor?? [ 695.604019][ T5709] cdc_ether 3-1:0.0: Descriptor too short [ 695.605384][ T5709] usb 3-1: unsupported MDLM descriptors [ 696.212991][T11289] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.228578][T11291] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 696.228606][T11291] CIFS mount error: No usable UNC path provided in device string! [ 696.228606][T11291] [ 696.228833][T11291] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 696.462673][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.674942][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.740309][ T9] usb 3-1: USB disconnect, device number 33 [ 697.794636][ T3439] bridge_slave_1: left allmulticast mode [ 697.794670][ T3439] bridge_slave_1: left promiscuous mode [ 697.794900][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.822391][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.923667][ T3439] bridge_slave_0: left allmulticast mode [ 697.923701][ T3439] bridge_slave_0: left promiscuous mode [ 697.923957][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.685278][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.762617][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.815339][ T3439] bond0 (unregistering): Released all slaves [ 699.021982][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.133600][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 699.303431][T11339] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 699.341773][T11338] CIFS mount error: No usable UNC path provided in device string! [ 699.341773][T11338] [ 699.341935][T11338] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 699.375815][T11342] fuse: Bad value for 'fd' [ 699.420501][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 699.742329][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.753791][T11343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.821238][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 700.373228][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.864972][ T3439] hsr_slave_0: left promiscuous mode [ 700.902506][ T3439] hsr_slave_1: left promiscuous mode [ 700.903241][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.955805][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.960910][T11359] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.590846][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.763711][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.981992][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.902886][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.343067][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 705.406378][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 705.633349][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.633564][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.633742][T11154] bridge_slave_0: entered allmulticast mode [ 705.636411][T11154] bridge_slave_0: entered promiscuous mode [ 705.806087][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.806166][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.806306][T11154] bridge_slave_1: entered allmulticast mode [ 705.850979][T11154] bridge_slave_1: entered promiscuous mode [ 705.854991][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.205560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.776584][T11385] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1428'. [ 706.923621][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.364432][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.457078][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.708602][T11154] team0: Port device team_slave_0 added [ 707.734418][T11154] team0: Port device team_slave_1 added [ 707.754502][T11403] fuse: Bad value for 'fd' [ 707.982255][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.196772][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 709.302072][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.328831][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.484056][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.546963][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.546977][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.546997][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.551059][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.551069][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.551087][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.174111][T11154] hsr_slave_0: entered promiscuous mode [ 711.189497][T11154] hsr_slave_1: entered promiscuous mode [ 711.198687][T11154] debugfs: 'hsr0' already exists in 'hsr' [ 711.200529][T11154] Cannot create hsr debugfs directory [ 711.768904][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.117281][T11433] CIFS mount error: No usable UNC path provided in device string! [ 712.117281][T11433] [ 712.117306][T11433] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 712.138357][T11432] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1438'. [ 712.448231][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.585702][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.924489][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.506057][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.050474][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 716.096055][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.433583][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.472710][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.785966][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.190751][T11477] CIFS mount error: No usable UNC path provided in device string! [ 719.190751][T11477] [ 719.190772][T11477] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 719.512535][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.542238][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.583548][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.824629][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.828331][T11513] CIFS mount error: No usable UNC path provided in device string! [ 721.828331][T11513] [ 721.828348][T11513] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 723.074245][T11524] fuse: Bad value for 'fd' [ 723.103109][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.822304][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.867045][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.206760][T11546] fuse: Bad value for 'fd' [ 725.664520][T11551] mmap: syz.3.1467 (11551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 725.907057][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.665106][ T37] audit: type=1326 audit(1779046272.566:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.665163][ T37] audit: type=1326 audit(1779046272.586:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.686527][ T37] audit: type=1326 audit(1779046272.606:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.686688][ T37] audit: type=1326 audit(1779046272.606:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.687467][ T37] audit: type=1326 audit(1779046272.606:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.715459][ T37] audit: type=1326 audit(1779046272.606:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.744844][ T37] audit: type=1326 audit(1779046272.656:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.744965][ T37] audit: type=1326 audit(1779046272.656:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.3.1468" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9382c6ce59 code=0x7ffc0000 [ 726.946858][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.347303][T11559] 9p: Bad value for 'rfdno' [ 727.941040][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.923439][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.309531][T11154] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 729.409294][T11154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.436465][T11154] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 729.492367][T11154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.509898][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.513624][T11154] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 729.557588][T11154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.561509][T11154] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 729.770164][T11154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.542852][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.942312][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.038417][T11599] fuse: Bad value for 'fd' [ 731.738562][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.769158][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.084295][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.141831][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.142727][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.181485][ T3197] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.181628][ T3197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.782624][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.033746][T11629] 9p: Bad value for 'rfdno' [ 733.999632][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.179316][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.180030][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.392162][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.442734][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.498345][T11651] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 734.554501][T11654] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1486'. [ 734.619644][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'. [ 734.675888][T11659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 735.133747][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.422472][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.482328][T11685] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1493'. [ 735.870621][ T6937] IPVS: starting estimator thread 0... [ 736.874446][T11692] IPVS: using max 8 ests per chain, 19200 per kthread [ 736.901921][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.779949][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.033230][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.245994][T11154] veth0_vlan: entered promiscuous mode [ 738.337800][T11154] veth1_vlan: entered promiscuous mode [ 739.592325][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.845611][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 739.914559][T11154] veth0_macvtap: entered promiscuous mode [ 739.949460][T11154] veth1_macvtap: entered promiscuous mode [ 740.083351][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.209513][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.282720][T11738] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1507'. [ 740.282742][T11738] tc_dump_action: action bad kind [ 740.384712][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.397067][ T3197] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.399858][ T3197] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.399946][ T3197] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.624017][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.782851][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.980409][T11753] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1510'. [ 741.359947][ T5739] IPVS: starting estimator thread 0... [ 741.470335][T11763] IPVS: using max 11 ests per chain, 26400 per kthread [ 741.676547][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.338816][T11774] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1514'. [ 742.372078][ T5739] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 742.518692][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.544371][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.576328][ T5739] usb 3-1: config index 0 descriptor too short (expected 12336, got 36) [ 742.576352][ T5739] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 742.576370][ T5739] usb 3-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 742.576387][ T5739] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 742.576420][ T5739] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.576441][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.577667][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.636574][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.638911][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.594312][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 743.836982][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.837972][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.979094][ T6938] usb 3-1: USB disconnect, device number 34 [ 743.992868][T11792] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1518'. [ 743.992892][T11792] tc_dump_action: action bad kind [ 745.678007][ T59] Bluetooth: hci2: command tx timeout [ 745.812375][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.185207][T11809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1523'. [ 746.283324][T11811] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1522'. [ 746.533977][ T6937] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 746.688929][T11820] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1525'. [ 746.727974][ T6937] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 746.728003][ T6937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.728022][ T6937] usb 3-1: Product: syz [ 746.728035][ T6937] usb 3-1: Manufacturer: syz [ 746.728049][ T6937] usb 3-1: SerialNumber: syz [ 746.865044][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.875436][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.114227][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 747.170777][ T6937] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 747.170815][ T6937] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 747.198980][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.199046][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.497516][T11830] 9p: Bad value for 'rfdno' [ 747.730855][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.744676][ T59] Bluetooth: hci2: command tx timeout [ 747.903841][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.962450][T11832] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1529'. [ 747.962464][T11832] tc_dump_action: action bad kind [ 747.993324][ T6937] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 747.993374][ T6937] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 748.044522][ T6937] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 748.087308][ T6937] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 748.135813][ T6937] usb 3-1: USB disconnect, device number 35 [ 749.544195][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.812839][T11851] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1536'. [ 749.833975][ T59] Bluetooth: hci2: command tx timeout [ 749.865194][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.885676][T11852] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1535'. [ 749.900276][T11852] openvswitch: netlink: Message has 16 unknown bytes. [ 749.908229][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.976143][T11862] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 751.022264][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 751.088575][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.240401][T11869] 9p: Bad value for 'rfdno' [ 751.902014][ T59] Bluetooth: hci2: command tx timeout [ 752.154283][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.878297][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.083298][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.195086][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.218915][T11882] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 754.019128][T11884] 9p: Bad value for 'rfdno' [ 755.779246][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.492688][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.940716][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.846409][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.328867][T11916] ceph: No mds server is up or the cluster is laggy [ 759.456309][T11914] 9p: Bad value for 'rfdno' [ 759.486778][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.504768][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.888883][T11930] binder: 11929:11930 ioctl 400c620e 200000000240 returned -22 [ 759.913214][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.021739][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.022287][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.022456][T11777] bridge_slave_0: entered allmulticast mode [ 760.025092][T11777] bridge_slave_0: entered promiscuous mode [ 760.028304][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.028490][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.028666][T11777] bridge_slave_1: entered allmulticast mode [ 760.031039][T11777] bridge_slave_1: entered promiscuous mode [ 760.131552][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.145140][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.194995][T11777] team0: Port device team_slave_0 added [ 760.198581][T11777] team0: Port device team_slave_1 added [ 760.247792][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.247809][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.247840][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.250168][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.250180][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.250207][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.337817][ T5709] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 760.482608][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 760.617527][ T5709] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 760.617860][ T5709] usb 3-1: config 0 has no interface number 0 [ 760.618225][ T5709] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 760.618302][ T5709] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 761.662714][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.507225][ T5709] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 762.507261][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.507285][ T5709] usb 3-1: Product: syz [ 762.507301][ T5709] usb 3-1: Manufacturer: syz [ 762.507317][ T5709] usb 3-1: SerialNumber: syz [ 763.538531][ T5709] usb 3-1: config 0 descriptor?? [ 763.557125][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.568676][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.756255][ T5709] usb 3-1: can't set config #0, error -71 [ 763.783466][ T5709] usb 3-1: USB disconnect, device number 36 [ 765.145614][T11958] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 765.327451][T11963] 9p: Bad value for 'rfdno' [ 765.527850][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.694977][T11777] hsr_slave_0: entered promiscuous mode [ 765.700252][T11777] hsr_slave_1: entered promiscuous mode [ 765.715731][T11777] debugfs: 'hsr0' already exists in 'hsr' [ 765.715762][T11777] Cannot create hsr debugfs directory [ 766.687298][T11971] syz_tun: entered allmulticast mode [ 766.712650][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.070997][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.152368][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.725668][T11981] fuse: Bad value for 'fd' [ 767.864014][ T56] bridge_slave_1: left allmulticast mode [ 767.864041][ T56] bridge_slave_1: left promiscuous mode [ 767.864226][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.943868][ T56] bridge_slave_0: left allmulticast mode [ 767.943900][ T56] bridge_slave_0: left promiscuous mode [ 767.944167][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.223275][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.618417][T11990] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1569'. [ 768.692749][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.732610][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.756166][ T56] bond0 (unregistering): Released all slaves [ 769.264181][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.267237][ T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.268541][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.316473][T11999] 9p: Bad value for 'rfdno' [ 769.316643][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.449243][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.454728][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.639224][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.841031][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.508638][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.543642][T12039] 9p: Bad value for 'rfdno' [ 773.559752][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 773.848313][T12042] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1584'. [ 775.337198][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.391933][ T56] hsr_slave_0: left promiscuous mode [ 775.411970][ T56] hsr_slave_1: left promiscuous mode [ 775.412661][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.412677][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.435649][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.435702][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.527368][ T56] veth1_macvtap: left promiscuous mode [ 775.527467][ T56] veth0_macvtap: left promiscuous mode [ 775.527690][ T56] veth1_vlan: left promiscuous mode [ 775.529721][ T56] veth0_vlan: left promiscuous mode [ 776.915418][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.992183][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.512909][ T56] team0 (unregistering): Port device team_slave_1 removed [ 777.543394][ T56] team0 (unregistering): Port device team_slave_0 removed [ 778.079101][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.130619][T12068] 9p: Bad value for 'rfdno' [ 779.903475][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.982516][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.168762][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 780.970551][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.497422][T12114] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1602'. [ 783.178395][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.182046][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.373387][T12125] 9p: Bad value for 'rfdno' [ 784.427297][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.771480][T11777] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.814842][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.935233][T11777] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 785.132879][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.135674][T11777] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 785.268714][T12153] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1614'. [ 785.272971][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.510916][T11777] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 785.738354][T11777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.855738][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.606539][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.862472][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.167313][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.268104][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.329323][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.329413][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.480796][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.480980][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.736038][T12150] capability: warning: `syz.1.1612' uses deprecated v2 capabilities in a way that may be insecure [ 787.869595][T12180] lo speed is unknown, defaulting to 1000 [ 787.869753][T12180] lo speed is unknown, defaulting to 1000 [ 787.874821][T12180] lo speed is unknown, defaulting to 1000 [ 787.877583][T12180] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 787.877617][T12180] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 787.877659][T12180] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 787.883876][T12180] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 787.896623][T12180] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 787.941085][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.979257][T12180] lo speed is unknown, defaulting to 1000 [ 787.983100][T12180] lo speed is unknown, defaulting to 1000 [ 787.986892][T12180] lo speed is unknown, defaulting to 1000 [ 787.989575][T12180] lo speed is unknown, defaulting to 1000 [ 787.992269][T12180] lo speed is unknown, defaulting to 1000 [ 789.664253][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.802414][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.922677][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.185148][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.690391][T12235] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1624'. [ 791.982331][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.039782][T12244] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1626'. [ 792.170420][T11777] veth0_vlan: entered promiscuous mode [ 792.201311][T11777] veth1_vlan: entered promiscuous mode [ 792.275082][T11777] veth0_macvtap: entered promiscuous mode [ 792.280999][T11777] veth1_macvtap: entered promiscuous mode [ 792.421026][T11777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.468592][T11777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.524882][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.531066][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.550646][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.556195][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.716919][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.026132][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.610777][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.610796][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.842246][ T5739] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 793.992182][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 794.000505][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 794.017759][ T5739] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 794.062461][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.063407][ T5739] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 794.063433][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.063451][ T5739] usb 3-1: Product: syz [ 794.063465][ T5739] usb 3-1: Manufacturer: syz [ 794.063478][ T5739] usb 3-1: SerialNumber: syz [ 794.065169][ T3306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.065186][ T3306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.105889][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.742364][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.822156][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.656'. [ 796.147636][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.475776][ T5739] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 796.512007][ T5739] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 796.544825][ T5739] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 796.639462][ T5739] usb 3-1: USB disconnect, device number 37 [ 796.649304][T12286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1639'. [ 796.662112][ T5722] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 796.844278][ T5722] usb 7-1: Using ep0 maxpacket: 16 [ 796.846939][ T5722] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 796.846967][ T5722] usb 7-1: config 0 has no interface number 0 [ 796.847034][ T5722] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 796.847063][ T5722] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 796.897704][ T5722] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 796.897726][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.897742][ T5722] usb 7-1: Product: syz [ 796.897752][ T5722] usb 7-1: Manufacturer: syz [ 796.897763][ T5722] usb 7-1: SerialNumber: syz [ 796.939205][ T5722] usb 7-1: config 0 descriptor?? [ 796.954072][T12283] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 796.954316][T12283] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 797.172561][T12283] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1636'. [ 797.262284][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.755254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 797.977932][ T5722] asix 7-1:0.34: probe with driver asix failed with error -71 [ 798.041954][ T5722] usb 7-1: USB disconnect, device number 2 [ 798.256304][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 798.304009][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.783114][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.884983][T12324] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1654'. [ 799.321916][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 799.342309][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.476994][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 799.477023][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.477043][ T9] usb 7-1: Product: syz [ 799.477057][ T9] usb 7-1: Manufacturer: syz [ 799.477070][ T9] usb 7-1: SerialNumber: syz [ 800.755269][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.929671][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 800.929729][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 801.740633][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 801.740690][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 801.825156][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.847363][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 801.872154][ T9] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 801.907335][ T9] usb 7-1: USB disconnect, device number 3 [ 801.912923][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.375253][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.219343][T12361] lo speed is unknown, defaulting to 1000 [ 804.385542][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.477486][T12373] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 804.653967][T12373] team0: Port device dummy0 added [ 804.862829][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.911909][ T5739] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 805.066791][ T5739] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 805.066819][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.066839][ T5739] usb 7-1: Product: syz [ 805.066853][ T5739] usb 7-1: Manufacturer: syz [ 805.066867][ T5739] usb 7-1: SerialNumber: syz [ 805.663265][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.534948][ T5722] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 806.681911][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 806.684285][ T5722] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 806.684309][ T5722] usb 3-1: config 0 has no interface number 0 [ 806.684349][ T5722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 806.684374][ T5722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 806.687109][ T5722] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 806.687135][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.687155][ T5722] usb 3-1: Product: syz [ 806.687169][ T5722] usb 3-1: Manufacturer: syz [ 806.687184][ T5722] usb 3-1: SerialNumber: syz [ 806.841406][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.859928][ T5722] usb 3-1: config 0 descriptor?? [ 806.868267][T12396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 806.869009][T12396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 807.079706][T12396] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1681'. [ 807.788326][ T5739] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 807.788394][ T5739] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 807.886662][ T5722] asix 3-1:0.34: probe with driver asix failed with error -71 [ 807.909180][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.910071][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.954304][ T5722] usb 3-1: USB disconnect, device number 38 [ 808.615273][ T5739] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 808.615345][ T5739] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 808.619014][ T5739] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 808.632527][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.632597][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.694212][ T5739] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 808.767889][ T5739] usb 7-1: USB disconnect, device number 4 [ 808.952294][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.111272][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.455902][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.479536][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.918843][ T59] Bluetooth: hci0: Unable to find connection with handle 0x00c8 [ 812.311654][T12465] lo speed is unknown, defaulting to 1000 [ 812.582943][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.961049][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 815.086345][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.952656][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.308520][T12509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 816.308550][T12509] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 816.308628][T12509] vhci_hcd vhci_hcd.0: Device attached [ 816.309430][T12509] netlink: 'syz.3.1718': attribute type 12 has an invalid length. [ 816.468004][T12511] vhci_hcd: connection closed [ 816.496770][ T12] vhci_hcd vhci_hcd.3: stop threads [ 816.496788][ T12] vhci_hcd vhci_hcd.3: release socket [ 816.496812][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 816.875107][T12519] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1722'. [ 816.875190][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1722'. [ 817.703478][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.992346][T12526] lo speed is unknown, defaulting to 1000 [ 818.143056][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.228974][ T822] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 818.380930][ T822] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 818.380961][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.380988][ T822] usb 3-1: Product: syz [ 818.381000][ T822] usb 3-1: Manufacturer: syz [ 818.381010][ T822] usb 3-1: SerialNumber: syz [ 819.183733][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 819.183793][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 819.295076][T12558] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 819.295109][T12558] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 819.295193][T12558] vhci_hcd vhci_hcd.0: Device attached [ 819.352463][T12558] netlink: 'syz.5.1737': attribute type 12 has an invalid length. [ 820.124340][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.192661][T12560] vhci_hcd: connection closed [ 820.212125][T12553] vhci_hcd vhci_hcd.5: stop threads [ 820.212150][T12553] vhci_hcd vhci_hcd.5: release socket [ 820.212642][T12553] vhci_hcd vhci_hcd.5: disconnect device [ 820.232287][ T5740] usb 44-1: enqueue for inactive port 0 [ 820.418058][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 820.418114][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 820.419204][ T822] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 820.490748][ T822] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 820.549368][ T822] usb 3-1: USB disconnect, device number 39 [ 820.699096][T12571] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1741'. [ 820.699115][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1741'. [ 820.753084][ T5740] usb usb44-port1: attempt power cycle [ 821.184834][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.185230][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.317835][ T5740] usb usb44-port1: unable to enumerate USB device [ 824.266228][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.304648][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.376383][T12598] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 824.376412][T12598] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 824.376504][T12598] vhci_hcd vhci_hcd.0: Device attached [ 824.381197][T12598] netlink: 'syz.5.1753': attribute type 12 has an invalid length. [ 824.575248][T12599] vhci_hcd: connection closed [ 824.583217][ T3375] vhci_hcd vhci_hcd.5: stop threads [ 824.583239][ T3375] vhci_hcd vhci_hcd.5: release socket [ 824.583274][ T3375] vhci_hcd vhci_hcd.5: disconnect device [ 825.546147][T12614] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1758'. [ 826.222146][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.544554][ T5739] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 826.566738][T12618] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1760'. [ 826.696009][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 826.710887][ T5739] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 826.710929][ T5739] usb 3-1: config 0 has no interface number 0 [ 826.710969][ T5739] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 826.710992][ T5739] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 826.758265][ T5739] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 826.758295][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.758309][ T5739] usb 3-1: Product: syz [ 826.758319][ T5739] usb 3-1: Manufacturer: syz [ 826.758329][ T5739] usb 3-1: SerialNumber: syz [ 826.868978][ T5739] usb 3-1: config 0 descriptor?? [ 826.870482][T12604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.870599][T12604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.902029][ T5740] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 827.080841][T12604] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1755'. [ 827.460604][ T5740] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 827.460634][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.460709][ T5740] usb 7-1: Product: syz [ 827.460724][ T5740] usb 7-1: Manufacturer: syz [ 827.460737][ T5740] usb 7-1: SerialNumber: syz [ 827.512128][ T6938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.594201][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.624282][ T5739] asix 3-1:0.34: probe with driver asix failed with error -71 [ 827.747008][ T5739] usb 3-1: USB disconnect, device number 40 [ 827.818648][T12631] ieee802154 phy0 wpan0: encryption failed: -22 [ 828.012895][ T5740] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 828.012956][ T5740] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 828.662791][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.016120][ T5740] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 829.016173][ T5740] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 829.017758][ T5740] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 829.073654][ T5740] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 829.119158][ T5740] usb 7-1: USB disconnect, device number 5 [ 829.474411][T12645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 830.261932][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.556442][T12653] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 830.556469][T12653] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 830.556549][T12653] vhci_hcd vhci_hcd.0: Device attached [ 830.562057][T12653] netlink: 'syz.3.1771': attribute type 12 has an invalid length. [ 830.624911][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.809029][T12656] vhci_hcd: connection closed [ 830.809601][ T91] vhci_hcd vhci_hcd.3: stop threads [ 830.809625][ T91] vhci_hcd vhci_hcd.3: release socket [ 830.809663][ T91] vhci_hcd vhci_hcd.3: disconnect device [ 831.841972][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.134080][T12669] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1776'. [ 832.982000][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.000759][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 833.489863][T12683] netlink: 'syz.1.1783': attribute type 10 has an invalid length. [ 834.379005][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.420361][T12683] syz_tun: entered promiscuous mode [ 834.472409][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.767278][T12683] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 835.027242][T12698] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1788'. [ 835.574373][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.105915][T12711] tmpfs: Bad value for 'mpol' [ 836.704312][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.978345][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1794'. [ 838.022229][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.271073][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.688598][ T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 840.062319][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.147072][ T36] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 840.147100][ T36] usb 7-1: config 1 has no interface number 0 [ 840.147146][ T36] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 840.147173][ T36] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 840.147198][ T36] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.150468][ T36] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 840.150494][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.150518][ T36] usb 7-1: Product: syz [ 840.150531][ T36] usb 7-1: Manufacturer: syz [ 840.150546][ T36] usb 7-1: SerialNumber: syz [ 840.255777][T12733] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 840.813266][T12733] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 841.139100][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.518026][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.637163][ T36] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 841.898344][ T36] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 841.898371][ T36] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 841.957559][ T36] usb 7-1: USB disconnect, device number 6 [ 841.976129][ T36] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 842.145388][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.223205][ T36] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 843.734112][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.062599][T12773] netlink: 'syz.5.1812': attribute type 10 has an invalid length. [ 844.062962][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.107290][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.544741][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.365976][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.366119][T12773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.430745][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.430863][T12773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.497217][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.640372][T12773] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 845.835449][T12775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.965181][T12783] bad cache= option: none$Ån TNàæ-mB>v¾£qfØ"­´TÍ-ÿ;7 [ 845.965181][T12783] [ 845.965426][T12783] CIFS: VFS: bad cache= option: none$Ån TNàæ-mB>v¾£qfØ"­´TÍ-ÿ;7 [ 846.009909][T12775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.142341][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1816'. [ 846.552422][T12549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.200782][T12806] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1822'. [ 849.644813][T12812] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1826'. [ 851.227610][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.497593][ T6937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.293172][T12818] bad cache= option: none$Ån TNàæ-mB>v¾£qfØ"­´TÍ-ÿ;7 [ 852.293172][T12818] [ 852.293194][T12818] CIFS: VFS: bad cache= option: none$Ån TNàæ-mB>v¾£qfØ"­´TÍ-ÿ;7 [ 852.510797][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 852.564317][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.467644][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 853.467756][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.467805][ T59] Tainted: [L]=SOFTLOCKUP [ 853.467814][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.467831][ T59] Workqueue: hci0 hci_rx_work [ 853.467967][ T59] Call Trace: [ 853.468006][ T59] [ 853.468069][ T59] dump_stack_lvl+0xe8/0x150 [ 853.468179][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 853.468302][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 853.468420][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 853.468462][ T59] ? rt_spin_unlock+0x160/0x200 [ 853.468491][ T59] kobject_add_internal+0x631/0xd10 [ 853.468595][ T59] kobject_add+0x163/0x240 [ 853.468641][ T59] ? __pfx_kobject_add+0x10/0x10 [ 853.468686][ T59] ? get_device_parent+0x370/0x3a0 [ 853.468766][ T59] device_add+0x408/0xbb0 [ 853.468800][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 853.468879][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 853.468959][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.469064][ T59] ? __pfx_[ 853.469064][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 853.469101][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.469149][ T59] ? skb_pull_data+0xfb/0x200 [ 853.469233][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 853.469273][ T59] hci_event_packet+0x659/0xef0 [ 853.469306][ T59] ? __pfx____migrate_enable+0x10/0x10 [ 853.469413][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.469443][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 853.469469][ T59] ? rt_spin_unlock+0x14f/0x200 [ 853.469500][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 853.469524][ T59] hci_rx_work+0x3ee/0x1040 [ 853.469552][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 853.469586][ T59] ? process_scheduled_works+0xa70/0x1860 [ 853.469616][ T59] process_scheduled_works+0xb5d/0x1860 [ 853.469670][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.469699][ T59] ? assign_work+0x3d5/0x5e0 [ 853.469726][ T59] worker_thread+0xa53/0xfc0 [ 853.469777][ T59] kthread+0x388/0x470 [ 853.469825][ T59] ? __pfx_worker_thread+0x10/0x10 [ 853.469846][ T59] ? __pfx_kthread+0x10/0x10 [ 853.469876][ T59] ret_from_fork+0x514/0xb70 [ 853.469913][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 853.469942][ T59] ? __switch_to+0xc79/0x1410 [ 853.469995][ T59] ? __pfx_kthread+0x10/0x10 [ 853.470031][ T59] ret_from_fork_asm+0x1a/0x30 [ 853.470081][ T59] [ 853.470464][ T59] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 853.470792][ T59] Bluetooth: hci0: failed to register connection device [ 853.861848][ T59] ================================================================== [ 853.861867][ T59] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 853.861903][ T59] Read of size 8 at addr ffff88803be84500 by task kworker/u9:0/59 [ 853.861989][ T59] [ 853.862005][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.862035][ T59] Tainted: [L]=SOFTLOCKUP [ 853.862043][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.862059][ T59] Workqueue: hci0 hci_rx_work [ 853.862088][ T59] Call Trace: [ 853.862097][ T59] [ 853.862106][ T59] dump_stack_lvl+0xe8/0x150 [ 853.862133][ T59] print_address_description+0x55/0x1e0 [ 853.862168][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.862190][ T59] print_report+0x58/0x70 [ 853.862221][ T59] kasan_report+0x117/0x150 [ 853.862294][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.862320][ T59] l2cap_connect_cfm+0x902/0x1560 [ 853.862347][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 853.862371][ T59] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 853.862429][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 853.862449][ T59] ? hci_connect_cfm+0x2c/0x140 [ 853.862480][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 853.862502][ T59] hci_connect_cfm+0x95/0x140 [ 853.862535][ T59] le_conn_complete_evt+0x1134/0x16b0 [ 853.862571][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.862623][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 853.862661][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.862693][ T59] ? skb_pull_data+0xfb/0x200 [ 853.862730][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 853.862769][ T59] hci_event_packet+0x659/0xef0 [ 853.862800][ T59] ? __pfx____migrate_enable+0x10/0x10 [ 853.862835][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.862884][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 853.862914][ T59] ? rt_spin_unlock+0x14f/0x200 [ 853.862948][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 853.862973][ T59] hci_rx_work+0x3ee/0x1040 [ 853.863003][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 853.863041][ T59] ? process_scheduled_works+0xa70/0x1860 [ 853.863068][ T59] process_scheduled_works+0xb5d/0x1860 [ 853.863112][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.863141][ T59] ? assign_work+0x3d5/0x5e0 [ 853.863168][ T59] worker_thread+0xa53/0xfc0 [ 853.863216][ T59] kthread+0x388/0x470 [ 853.863249][ T59] ? __pfx_worker_thread+0x10/0x10 [ 853.863274][ T59] ? __pfx_kthread+0x10/0x10 [ 853.863307][ T59] ret_from_fork+0x514/0xb70 [ 853.863335][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 853.863361][ T59] ? __switch_to+0xc79/0x1410 [ 853.863399][ T59] ? __pfx_kthread+0x10/0x10 [ 853.863432][ T59] ret_from_fork_asm+0x1a/0x30 [ 853.863471][ T59] [ 853.863480][ T59] [ 853.863492][ T59] Allocated by task 59: [ 853.863535][ T59] kasan_save_track+0x3e/0x80 [ 853.863557][ T59] __kasan_kmalloc+0x93/0xb0 [ 853.863579][ T59] __kmalloc_cache_noprof+0x3a6/0x690 [ 853.863632][ T59] l2cap_chan_create+0x51/0x7a0 [ 853.863657][ T59] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 853.863709][ T59] l2cap_connect_cfm+0x368/0x1560 [ 853.863731][ T59] hci_connect_cfm+0x95/0x140 [ 853.863762][ T59] le_conn_complete_evt+0x1134/0x16b0 [ 853.863798][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 853.863830][ T59] hci_event_packet+0x659/0xef0 [ 853.863856][ T59] hci_rx_work+0x3ee/0x1040 [ 853.863882][ T59] process_scheduled_works+0xb5d/0x1860 [ 853.863904][ T59] worker_thread+0xa53/0xfc0 [ 853.863927][ T59] kthread+0x388/0x470 [ 853.863956][ T59] ret_from_fork+0x514/0xb70 [ 853.863978][ T59] ret_from_fork_asm+0x1a/0x30 [ 853.864005][ T59] [ 853.864011][ T59] Freed by task 12836: [ 853.864022][ T59] kasan_save_track+0x3e/0x80 [ 853.864041][ T59] kasan_save_free_info+0x46/0x50 [ 853.864096][ T59] __kasan_slab_free+0x5c/0x80 [ 853.864116][ T59] kfree+0x1c5/0x6c0 [ 853.864154][ T59] l2cap_sock_cleanup_listen+0xf0/0x440 [ 853.864177][ T59] l2cap_sock_release+0x6e/0x270 [ 853.864218][ T59] sock_close+0xc3/0x240 [ 853.864294][ T59] __fput+0x461/0xa70 [ 853.864383][ T59] task_work_run+0x1d9/0x270 [ 853.864413][ T59] get_signal+0x11eb/0x1330 [ 853.864434][ T59] arch_do_signal_or_restart+0xbc/0x840 [ 853.864468][ T59] exit_to_user_mode_loop+0x8c/0x4d0 [ 853.864519][ T59] do_syscall_64+0x33e/0xf80 [ 853.864548][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.864585][ T59] [ 853.864590][ T59] The buggy address belongs to the object at ffff88803be84000 [ 853.864590][ T59] which belongs to the cache kmalloc-2k of size 2048 [ 853.864610][ T59] The buggy address is located 1280 bytes inside of [ 853.864610][ T59] freed 2048-byte region [ffff88803be84000, ffff88803be84800) [ 853.864634][ T59] [ 853.864640][ T59] The buggy address belongs to the physical page: [ 853.864660][ T59] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3be80 [ 853.864681][ T59] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 853.864700][ T59] flags: 0x80000000000040(head|node=0|zone=1) [ 853.864724][ T59] page_type: f5(slab) [ 853.864745][ T59] raw: 0080000000000040 ffff88801a011000 dead000000000100 dead000000000122 [ 853.864766][ T59] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 853.864788][ T59] head: 0080000000000040 ffff88801a011000 dead000000000100 dead000000000122 [ 853.864807][ T59] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 853.864828][ T59] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 853.864847][ T59] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 853.864859][ T59] page dumped because: kasan: bad access detected [ 853.864875][ T59] page_owner tracks the page as allocated [ 853.864883][ T59] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5606, tgid 5606 (syz-executor), ts 98498084547, free_ts 98223893665 [ 853.864923][ T59] post_alloc_hook+0x231/0x280 [ 853.864973][ T59] get_page_from_freelist+0x27c8/0x2840 [ 853.865001][ T59] __alloc_frozen_pages_noprof+0x18d/0x380 [ 853.865028][ T59] allocate_slab+0x77/0x660 [ 853.865058][ T59] refill_objects+0x33c/0x3d0 [ 853.865086][ T59] __pcs_replace_empty_main+0x373/0x720 [ 853.865119][ T59] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 853.865144][ T59] pskb_expand_head+0x230/0x1390 [ 853.865174][ T59] netlink_trim+0x1b3/0x2c0 [ 853.865239][ T59] netlink_broadcast_filtered+0x80/0xea0 [ 853.865264][ T59] nlmsg_notify+0xf0/0x1a0 [ 853.865288][ T59] __dev_notify_flags+0xf2/0x310 [ 853.865345][ T59] netif_change_flags+0xe8/0x1a0 [ 853.865370][ T59] do_setlink+0xfa5/0x45a0 [ 853.865415][ T59] rtnl_newlink+0x15ad/0x1bb0 [ 853.865439][ T59] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 853.865461][ T59] page last free pid 5753 tgid 5753 stack trace: [ 853.865474][ T59] __free_frozen_pages+0xfa6/0x10f0 [ 853.865497][ T59] __slab_free+0x252/0x2a0 [ 853.865519][ T59] qlist_free_all+0x99/0x100 [ 853.865538][ T59] kasan_quarantine_reduce+0x148/0x160 [ 853.865557][ T59] __kasan_slab_alloc+0x22/0x80 [ 853.865578][ T59] __kmalloc_noprof+0x399/0x7b0 [ 853.865601][ T59] tomoyo_encode+0x28b/0x550 [ 853.865705][ T59] tomoyo_realpath_from_path+0x58d/0x5d0 [ 853.865725][ T59] tomoyo_realpath_nofollow+0xc3/0x110 [ 853.865745][ T59] tomoyo_find_next_domain+0x25a/0x1aa0 [ 853.865771][ T59] tomoyo_bprm_check_security+0x11c/0x180 [ 853.865794][ T59] security_bprm_check+0x85/0x240 [ 853.865874][ T59] bprm_execve+0x8a4/0x1510 [ 853.865920][ T59] kernel_execve+0x844/0x930 [ 853.865941][ T59] call_usermodehelper_exec_async+0x212/0x360 [ 853.865963][ T59] ret_from_fork+0x514/0xb70 [ 853.865986][ T59] [ 853.865991][ T59] Memory state around the buggy address: [ 853.866003][ T59] ffff88803be84400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.866020][ T59] ffff88803be84480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.866036][ T59] >ffff88803be84500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.866048][ T59] ^ [ 853.866059][ T59] ffff88803be84580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.866074][ T59] ffff88803be84600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.866086][ T59] ================================================================== [ 853.871453][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 853.871477][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.871511][ T59] Tainted: [L]=SOFTLOCKUP [ 853.871520][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.871536][ T59] Workqueue: hci0 hci_rx_work [ 853.871568][ T59] Call Trace: [ 853.871577][ T59] [ 853.871587][ T59] vpanic+0x56c/0xa60 [ 853.871620][ T59] ? __pfx_vpanic+0x10/0x10 [ 853.871666][ T59] panic+0xc5/0xd0 [ 853.871690][ T59] ? __pfx_panic+0x10/0x10 [ 853.871717][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 853.871753][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.871775][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 853.871809][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.871829][ T59] check_panic_on_warn+0x89/0xb0 [ 853.871874][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.871895][ T59] end_report+0x73/0x170 [ 853.871920][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.871940][ T59] kasan_report+0x128/0x150 [ 853.871965][ T59] ? l2cap_connect_cfm+0x902/0x1560 [ 853.871991][ T59] l2cap_connect_cfm+0x902/0x1560 [ 853.872018][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 853.872041][ T59] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 853.872071][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 853.872091][ T59] ? hci_connect_cfm+0x2c/0x140 [ 853.872121][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 853.872143][ T59] hci_connect_cfm+0x95/0x140 [ 853.872175][ T59] le_conn_complete_evt+0x1134/0x16b0 [ 853.872217][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.872250][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 853.872286][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.872317][ T59] ? skb_pull_data+0xfb/0x200 [ 853.872350][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 853.872386][ T59] hci_event_packet+0x659/0xef0 [ 853.872416][ T59] ? __pfx____migrate_enable+0x10/0x10 [ 853.872442][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 853.872471][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 853.872497][ T59] ? rt_spin_unlock+0x14f/0x200 [ 853.872523][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 853.872545][ T59] hci_rx_work+0x3ee/0x1040 [ 853.872572][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 853.872624][ T59] ? process_scheduled_works+0xa70/0x1860 [ 853.872649][ T59] process_scheduled_works+0xb5d/0x1860 [ 853.872690][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.872720][ T59] ? assign_work+0x3d5/0x5e0 [ 853.872745][ T59] worker_thread+0xa53/0xfc0 [ 853.872785][ T59] kthread+0x388/0x470 [ 853.872815][ T59] ? __pfx_worker_thread+0x10/0x10 [ 853.872839][ T59] ? __pfx_kthread+0x10/0x10 [ 853.872870][ T59] ret_from_fork+0x514/0xb70 [ 853.872897][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 853.872921][ T59] ? __switch_to+0xc79/0x1410 [ 853.872958][ T59] ? __pfx_kthread+0x10/0x10 [ 853.872998][ T59] ret_from_fork_asm+0x1a/0x30 [ 853.873033][ T59] [ 853.873956][ T59] Kernel Offset: disabled