last executing test programs: 28.329288352s ago: executing program 0 (id=695): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) (async) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 27.439300103s ago: executing program 0 (id=698): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x6, 0x100d, &(0x7f00000017c0)=""/4109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x69) 27.411487256s ago: executing program 0 (id=700): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8001000028000701feffffff00000000017c00006a01d9809aa05460fb083863a8f4fa2d38fa6b01b8382b2823818815486ef550c511df4837866e1ed76b9cffe865ce74f583583fdf466114febad0a2210c797a1cf3b35b097e9fc0b53085d493d82457ef554b98c8d06ade7f4cd8761502000000bc12209b38176d589054900ed87798af87404af27feb0e7218a21c9d90e06c6879cf6cbe5fe62f4993907a8acd5eb090dc0c8192e7a7a2176394d995fe5b4c63a8875f4af4e100000100000075002f8008008a00", @ANYRES32=0x0, @ANYBLOB="ca1ac7a4b285d4db199d13c10b96f4c490b3b3eabc53d8d3b829a89fc4cad4e38577a704f755a13f70dc379ab93a5aa896fb6665807fd499a1a3c6f1a376bc2a52c1dc76809203b38f04b5f4e8ae61d9216eda8633a81779eb241136f9b0c03ea17457f8f2f2ee18ee07d4126e970009002b345cffff000000000000a973f800c6cf5e423d1c1a2e6a0da88dcb50ffa29867daeb3431b8d4deb8551c19860a38b736f97ab79d730c991633de01c726187c6964f45afad8762742128ea885030000"], 0x180}, 0x1, 0x0, 0x0, 0x48815}, 0x400c000) (async) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x63, 0xd, 0x1, @tick=0x1, {0x43, 0xff}, {0x10, 0x9}, @control={0x3, 0x7, 0x7}}, {0x0, 0x0, 0x0, 0x0, @time={0x3, 0x4}, {}, {0x80, 0x1}, @connect={{0x3c, 0x7}, {0x80, 0xf6}}}], 0x38) (async) read$snapshot(r5, 0x0, 0xffffffbf) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x141a02, 0x0) write$nci(r7, 0x0, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003900)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYRESOCT=r10], 0x10e0}}, 0x0) 27.187139105s ago: executing program 0 (id=703): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) pread64(r0, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x8) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = inotify_init() r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x411501) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x7) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r7 = openat(r0, &(0x7f00000002c0)='.\x00', 0x123000, 0xa) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x8) syz_clone(0x4040000, &(0x7f0000000100)="169400ccba", 0x5, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ff5e31a37d6e3dc6c84cff60e72d84cc2b1787eab809c6dbed3878cc61") ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x40000002, 0xffffffffffffffff, 0x2, &(0x7f0000000300)) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="000089140104b13d050005000100000186dd06000209bbbbbbbbbbbb00000000000000000000000000000000aaaaaaaaaaaafc00"/66], 0x42) openat$cgroup_ro(r7, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) 27.081573961s ago: executing program 0 (id=704): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000adca16cf5372955cc97db09b4325800014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a00e4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644c", 0xd8}], 0x1}, 0x40040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x5}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vti={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8a41}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r14, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r14, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xae}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 26.782468872s ago: executing program 0 (id=706): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0be3c10841f7ccf06f5e78cf6fd48cfb9933d6fc59ea9832e6fadd55ab1ad7bde89b9f60096d47c71a61dd42dea7341814dcc5be259d7b329f0d664a18dd56b4abc0626621b05021d462c25320d08cdfe92ff1f09ee3ef2b38a9bea7e14353fd1e375b1811b852eb6fe696e8c098443975554158c38a44643ccfb1015bd04d130557841e343a543989ff7f10fbc6062d0c4c9705616e40772bc467c46a99ceaa98b4ca505fe0314a8edea0112e8cb129f5b196f41f89782519695fbf269acab412be2caa73f81c7628257a5efcc44dfae7ad7f138b40c454ab9134f2d3bdb94f92aa7e835d", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf25010000001800018014000400fc0200000000000000000000000000010800020007000000050005000b000000080004000500000008000400ff070000050005000200000008000400dd0f00000800030007000000"], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) 26.615556632s ago: executing program 32 (id=706): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0be3c10841f7ccf06f5e78cf6fd48cfb9933d6fc59ea9832e6fadd55ab1ad7bde89b9f60096d47c71a61dd42dea7341814dcc5be259d7b329f0d664a18dd56b4abc0626621b05021d462c25320d08cdfe92ff1f09ee3ef2b38a9bea7e14353fd1e375b1811b852eb6fe696e8c098443975554158c38a44643ccfb1015bd04d130557841e343a543989ff7f10fbc6062d0c4c9705616e40772bc467c46a99ceaa98b4ca505fe0314a8edea0112e8cb129f5b196f41f89782519695fbf269acab412be2caa73f81c7628257a5efcc44dfae7ad7f138b40c454ab9134f2d3bdb94f92aa7e835d", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf25010000001800018014000400fc0200000000000000000000000000010800020007000000050005000b000000080004000500000008000400ff070000050005000200000008000400dd0f00000800030007000000"], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) 2.752203939s ago: executing program 4 (id=834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0xe0, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0xcc, 0x1, [@m_ct={0x80, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x40, 0x6, "fc4c73ff70430d642607cd1bf17632926d1205227d7094b2f1235960049292ce57c6f1a081f04e8e0a10ef0e207c0a3b225788c1cf420734f2aec82d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffefffffff, 0x0, 0x4}, 0xfffe}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x20010, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0xbd48}) read$FUSE(r7, 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x80000000, 0x0, 0x2, 0xffff6947, 0x20001, 0x249}, {0x80000008, 0x0, 0x4bfe710e7a371047, 0x42, 0x13, 0x0, 0xc}]}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 1.906131141s ago: executing program 3 (id=838): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendfile(r0, r0, 0x0, 0x6) 1.898617059s ago: executing program 3 (id=839): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000200)={0x20, 0x0, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000240), 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fff}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x440b0) 1.740589276s ago: executing program 3 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="d001000000000000f9ffffffffffffff030000000000000000000000000000000000000000000000030000000000000006000000ff00000000000000000000000500000000400000000000000000008007000000000000000d00000000000000000000000000000004040000030000003e00000000400000a5000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000080fcffffff000000000200000000000000010001000000000084"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 1.632100649s ago: executing program 4 (id=843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.513425385s ago: executing program 1 (id=844): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x1004, 0x0, 0xfffffff0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff00000000711093000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x1004, 0x0, 0xfffffff0}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff00000000711093000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) 1.442046789s ago: executing program 1 (id=845): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4e, r1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000001040)=0xfffffff8, 0x4) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0xfa, @private0, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000000)="e2", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='v', 0x1}, {&(0x7f0000000180)="71a9626c90b141f577fa76b3f7271ab4a89c4e4f3cc89fc721afe5f38098014b35c8fc441d4ab8091b28b67605f00c67a4a51a8b123f1b19a1a4e7ae03ba99242ca4875e6982b5d9d0cb9890e383baf9bed7e301fac6fc2e7c6d82d75e39fcf2076d6bd7bab978082ccc19c79b892b57b786e7cc0601dfcc82d0badba38a5ce45dd10ab3baf915fb6af5c13e636dde67f29ee7b0e2cea9f1", 0x98}, {&(0x7f0000001440)="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", 0x500}], 0x3}}], 0x2, 0x4045) 1.441543375s ago: executing program 2 (id=846): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x2c, 0x3, 0x1000) (async) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000001700)=@tipc=@id, 0x80, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/248, 0xf8}, {&(0x7f00000012c0)=""/203, 0xcb}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/145, 0x91}, {&(0x7f0000001500)=""/91, 0x5b}, {&(0x7f0000001580)=""/226, 0xe2}], 0x6}, 0x6}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000fc0), 0x200, 0x0) syz_io_uring_setup(0x3af4, &(0x7f00000000c0)={0x0, 0xa5f3, 0x20000, 0x0, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x2000000005, 0x2b119703347e53f7, 0x4, 0x40000000004, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socketpair(0x18, 0x6, 0x1, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000c00000010ff3d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf0500000000000020650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063e"], &(0x7f0000000100)='GPL\x00'}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001100)=@gettaction={0xa4, 0x32, 0x4, 0x6, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd17}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xa4}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000004feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e23000500000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xae) 1.37207269s ago: executing program 1 (id=847): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x885e000) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="4dfda55f3582141896a5a62c26ef497f4805b0", 0x13}], 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@ax25={{}, [@null, @bcast, @null, @bcast, @remote, @bcast, @netrom, @netrom]}, &(0x7f0000000140)=0x80, 0x800) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x5a9882, 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x2, r4, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r4, 0x4, 0x2001) socket$kcm(0x29, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) openat$uhid(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000280)={0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0)={0x5}, 0x4) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000300)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x2}) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x2bfba8d3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x404}, 0x1c) fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000400)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3}) fsync(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000440)={0x2, 'macsec0\x00', {0x1}, 0x7ff}) cachestat(r1, &(0x7f0000000480)={0xf, 0x80}, &(0x7f00000004c0), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x8080) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000640)=0xfffffffffffffffc, 0x4) r8 = dup3(r2, r3, 0x80000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x10) 1.371708569s ago: executing program 1 (id=848): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@perf_event}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x1, 0x20000000000}, {0x1, 0x2, 0x0, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x4004880) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)={0x1, 0x0, [{0x40000000, 0x6, 0x7, 0xfffffffd, 0x1, 0x2, 0xf090}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x60, @loopback, @local, 0x7800, 0x7, 0x80, 0x3}}) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x7}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x61, 0x61, 0x30, 0x61, 0x61]}}, &(0x7f0000000500)=""/165, 0x37, 0xa5, 0x0, 0x1}, 0x28) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x8001}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffff7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x9, 0x9, 0x10, 0xc}], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r1, r7], &(0x7f00000006c0)=[{0x4, 0x1, 0xf, 0x6}, {0x5, 0x5, 0xb, 0x9}, {0x5, 0x4, 0x2, 0x5}, {0x2, 0x3, 0xc, 0xc}, {0x4, 0x2, 0x9, 0x2}, {0x0, 0x1, 0x10, 0x3}], 0x10, 0x6}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.371459286s ago: executing program 2 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x900, 0x1}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010200"/20, @ANYRES32=0x0, @ANYBLOB="040c000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 1.261842804s ago: executing program 2 (id=850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) 1.261606169s ago: executing program 2 (id=851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000440)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock2(&(0x7f00003e0000/0x800000)=nil, 0x800000, 0x0) (async) madvise(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (rerun: 64) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.131874385s ago: executing program 1 (id=852): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba4f0c7243cfaf3983427c7250be5aeb541b4b317897bcfe86a812677427a0b5c59185db31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x10bb0}}}}}}]}, 0x48}}, 0x40080) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048045) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 1.012237861s ago: executing program 2 (id=853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x4004010) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x4004e502, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 751.709914ms ago: executing program 4 (id=854): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 675.039373ms ago: executing program 4 (id=855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xa, 0xffffffff, 0x3, 0x1, 0x953a, 0x8000000000000000, 0x7f, 0x846, 0xb1d, 0x4000000000000008, 0x0, 0x81, 0x3, 0xffffffffffffffff, 0xe5, 0x40], 0xdddd1000, 0x383fc2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 608.047493ms ago: executing program 3 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x1}) futex(&(0x7f0000000b40)=0x1, 0xb, 0x1, 0x0, &(0x7f0000000bc0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd(0x8c66) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x1}) (async) futex(&(0x7f0000000b40)=0x1, 0xb, 0x1, 0x0, &(0x7f0000000bc0), 0x0) (async) 502.020318ms ago: executing program 4 (id=857): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007400)={&(0x7f0000000100)={0x50, 0x4a869cc0a2847a9c, 0x3, {0x7, 0x2b, 0x7, 0x82021, 0x7ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe80000000000000000000000000000000000000000000004e2400000200002000"/64, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="00000000000000000000ff"], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb8}}, 0x40000) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000082a000000110001007c6945af64ba53bc0500000a"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x4c080) 352.181915ms ago: executing program 4 (id=858): waitid(0x11, 0x0, 0x0, 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x12842) r5 = gettid() sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8004, 0x0, 0xb49, 0x202000000002, 0x7, 0x8, 0x6}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x70bd25, 0x25dfdbfe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3ed, 0x0, 0x70bd2a, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x48000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1) readv(r8, &(0x7f0000000540), 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r6) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0xc0045520, &(0x7f00000000c0)=""/92) 261.53904ms ago: executing program 3 (id=859): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4c3}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x82043) ioctl$LOOP_CHANGE_FD(r0, 0x401070cd, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="0a0000004fb780e44af742b2f1d73c1867973d0d87b0a6c228706d52a434cafee11c00620cb1543722d535c1948f043c694c912d0a22bc38c91d36bec2a10ef73cb42c2a7d53cb15b584d53aa026bf5983977ca7ad55418e8d6307855548a1bc998f5094786e25b8baaf743aa58e09432029cf6774836ff9924b0d", @ANYRESOCT=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES16=r3, @ANYBLOB="2e003300d000"], 0x4c}}, 0x0) 259.982756ms ago: executing program 3 (id=860): openat$tun(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x8, 0xc2002) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000080)={0xfc1d, 0x80000, r0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x40) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "4e9d2c035c463e68", "d76fe8a732881d5a114751a2639f6e76c9d4ed358ea87f8287d61bbea6fd0830", "cbff9dd8", "ee44e933e8a0e629"}, 0x38) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xc6, "59b19be4878fcbe16b9a25de9529d405676479559d3c3501131158ae19e1b02fd8c4d26ab63cf01c47f5b783ed9d753cae0efc7659b2fe4ad0410a2ef3f6b263aeefd0492d4ac248af1e0e375206c9c39a21c456d2918cfe8754baf8b16b5ea8d62d3c5f786d90fd35e9739bb33486e48be499b1b4aa44ab03afbf6309ca2bb1bb85900263c7302d5828156b8fe161c06bb3acaead621303dc4b979aba0d4205602c43a2de1404d433bb4361909af3790af548dd62f765f132f456928d3c04b7bdacee47b795"}, &(0x7f00000002c0)=0xce) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r6, 0xb5}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x75f}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r7) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf287}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x199a}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40041) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$dlm_control(0xffffff9c, &(0x7f00000005c0), 0x80, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000600)={r6, 0x6, 0x7, 0x7, 0x5, 0x3}, 0x14) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000640)=0xd5) fsetxattr$security_ima(r1, &(0x7f0000000680), &(0x7f00000006c0)=@sha1={0x1, "ccdeb5d592b5f3105ab51de8273f698b40e2fa90"}, 0x15, 0x2) r10 = openat$uhid(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000740)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0x3, 0x8, 0xc, 0x5, 0x8, "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"}}, 0x1118) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000001880)={0x7}) ioctl$CDROM_GET_CAPABILITY(r9, 0x5331) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0186416, &(0x7f00000018c0)={0x40, 0x10, 0x1, 0x2, 0x2, 0x3}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001900)={0x0}) ioctl$DRM_IOCTL_DMA(r5, 0xc0286429, &(0x7f0000001a40)={r11, 0x2, &(0x7f0000001940)=[0x5, 0x3], &(0x7f0000001980)=[0xb4ba, 0x8b5, 0x4, 0x174], 0x11, 0x6, 0x5, &(0x7f00000019c0)=[0x2, 0x81, 0x3, 0x6551d426, 0x7, 0xd499], &(0x7f0000001a00)=[0x81, 0x3, 0x0]}) ioctl$OCFS2_IOC_UNRESVSP64(r9, 0x402c582b, &(0x7f0000001a80)={0x3, 0x0, 0xffffffffffffff05, 0xee8, 0x2, 0x8000}) 747.729µs ago: executing program 2 (id=861): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x0, 0xa}, {0xfffffffffffffffe, 0x4ccd}, 0xfffffe28, 0x6}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 0s ago: executing program 1 (id=862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r1, &(0x7f0000002100)=[{&(0x7f0000000580)=""/151, 0x97}], 0x1) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x44, 0x6, 0x634, 0xa0, 0x480, 0x1f8, 0x2c4, 0x0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x2000000}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x1, 0x4, 0x1}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x8}, 0x0, 0x134, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@multicast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, [0xffffff00, 0x0, 0x0, 0xffffffff], @ipv4=@loopback, [0xff, 0xff, 0x0, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], 0xfff, 0x0, 0xc, 0x4e24, 0x4e22, 0x4e20, 0x4e22, 0x1, 0x32}, 0x101, 0x621, 0x4e21, 0x4e20, 0x4e24, 0x4e23}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'ip6gre0\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x15}}}, {{@uncond, 0x0, 0x94, 0x1bc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe4, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x690) kernel console output (not intermixed with test programs): __fget_files+0x21f/0x3d0 [ 98.490757][ T6800] security_file_ioctl_compat+0xd3/0x230 [ 98.490778][ T6800] __ia32_compat_sys_ioctl+0xc2/0x360 [ 98.490800][ T6800] __do_fast_syscall_32+0xe7/0x950 [ 98.490822][ T6800] ? lockdep_hardirqs_on+0x78/0x100 [ 98.490845][ T6800] do_fast_syscall_32+0x32/0x70 [ 98.490868][ T6800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.490891][ T6800] RIP: 0023:0xf7f95fcc [ 98.490905][ T6800] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.490921][ T6800] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 98.490938][ T6800] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 98.490948][ T6800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.490958][ T6800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.490967][ T6800] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.490977][ T6800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.491001][ T6800] [ 98.491034][ T6800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.790615][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.793918][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.830435][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.086324][ T6830] fuse: Invalid rootmode [ 100.310350][ T6842] FAULT_INJECTION: forcing a failure. [ 100.310350][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.314621][ T6842] CPU: 3 UID: 0 PID: 6842 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 100.314635][ T6842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.314641][ T6842] Call Trace: [ 100.314646][ T6842] [ 100.314650][ T6842] dump_stack_lvl+0x100/0x190 [ 100.314665][ T6842] should_fail_ex.cold+0x5/0xa [ 100.314680][ T6842] _copy_to_user+0x32/0xd0 [ 100.314697][ T6842] simple_read_from_buffer+0xcb/0x170 [ 100.314711][ T6842] proc_fail_nth_read+0x1af/0x230 [ 100.314727][ T6842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.314743][ T6842] ? rw_verify_area+0xce/0x6d0 [ 100.314753][ T6842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.314769][ T6842] vfs_read+0x1e4/0xb30 [ 100.314782][ T6842] ? __pfx_vfs_read+0x10/0x10 [ 100.314792][ T6842] ? find_held_lock+0x2b/0x80 [ 100.314807][ T6842] ? __fget_files+0x215/0x3d0 [ 100.314821][ T6842] ? __fget_files+0x21f/0x3d0 [ 100.314836][ T6842] ksys_read+0x12a/0x250 [ 100.314847][ T6842] ? __pfx_ksys_read+0x10/0x10 [ 100.314858][ T6842] ? rcu_is_watching+0x12/0xc0 [ 100.314870][ T6842] ? rcu_is_watching+0x12/0xc0 [ 100.314884][ T6842] do_int80_emulation+0x141/0x700 [ 100.314900][ T6842] asm_int80_emulation+0x1a/0x20 [ 100.314911][ T6842] RIP: 0023:0xf71c616b [ 100.314919][ T6842] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.314929][ T6842] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.314939][ T6842] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f547d5d0 [ 100.314946][ T6842] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 100.314951][ T6842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.314957][ T6842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.314962][ T6842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.314975][ T6842] [ 100.871975][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.954955][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 101.783798][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.810890][ T6891] fuse: Bad value for 'fd' [ 101.826218][ T6887] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.829982][ T6887] overlayfs: failed to set xattr on upper [ 101.832518][ T6887] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.834623][ T6887] overlayfs: ...falling back to index=off. [ 101.836421][ T6887] overlayfs: ...falling back to uuid=null. [ 101.838377][ T6887] overlayfs: maximum fs stacking depth exceeded [ 101.840786][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.846477][ T6893] fuse: Bad value for 'rootmode' [ 101.911641][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.942591][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.946227][ T29] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 101.952387][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.955504][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.958368][ T29] usb 6-1: Product: syz [ 101.959842][ T29] usb 6-1: Manufacturer: syz [ 101.961774][ T29] usb 6-1: SerialNumber: syz [ 101.968746][ T29] cdc_mbim 6-1:1.0: skipping garbage [ 102.115251][ T6908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.171050][ T6881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.718586][ T6936] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 102.777712][ T6942] AppArmor: change_hat: Invalid input 'x' [ 102.830898][ T40] audit: type=1326 audit(1777231112.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.267" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x0 [ 102.940262][ T5718] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 102.950990][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.092097][ T5718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.096738][ T5718] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.102645][ T5718] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.106490][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.109819][ T5718] usb 7-1: Product: syz [ 103.111627][ T5718] usb 7-1: Manufacturer: syz [ 103.113228][ T5718] usb 7-1: SerialNumber: syz [ 103.164186][ T5718] usb 7-1: selecting invalid altsetting 1 [ 103.567344][ T5718] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 103.572412][ T5718] cdc_ncm 7-1:1.0: bind() failure [ 103.590636][ T5718] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 103.593541][ T5718] cdc_ncm 7-1:1.1: bind() failure [ 103.600889][ T5718] usb 7-1: USB disconnect, device number 5 [ 103.995170][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.162951][ T6959] fuse: Bad value for 'fd' [ 104.293655][ T6963] fuse: Bad value for 'rootmode' [ 104.566263][ T29] cdc_mbim 6-1:1.0: bind() failure [ 104.572483][ T29] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 104.575575][ T29] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 104.590558][ T29] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 104.598955][ T29] usb 6-1: USB disconnect, device number 3 [ 104.880307][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.040512][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.100311][ T5825] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 105.252368][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.255843][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 105.259404][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 105.263073][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 105.266606][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.273249][ T5825] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 105.276437][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.278972][ T5825] usb 6-1: Product: syz [ 105.280642][ T5825] usb 6-1: Manufacturer: syz [ 105.282157][ T5825] usb 6-1: SerialNumber: syz [ 105.286852][ T5825] usb 6-1: config 0 descriptor?? [ 105.288980][ T6980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.294699][ T5825] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 105.493962][ T10] usb 6-1: USB disconnect, device number 4 [ 106.081042][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.717366][ T7015] fuse: Invalid rootmode [ 106.930239][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 107.070221][ T10] usb 6-1: device descriptor read/64, error -71 [ 107.123016][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.133099][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.330215][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 107.470341][ T10] usb 6-1: device descriptor read/64, error -71 [ 107.510762][ T7024] fuse: Bad value for 'rootmode' [ 107.583335][ T10] usb usb6-port1: attempt power cycle [ 107.811954][ T7032] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 107.921176][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.940255][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 107.961040][ T10] usb 6-1: device descriptor read/8, error -71 [ 108.090375][ T5840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.152144][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.208280][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 108.211649][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 108.214681][ T7039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 108.217305][ T7039] UDF-fs: Scanning with blocksize 512 failed [ 108.220029][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 108.220218][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 108.223478][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 108.229617][ T7039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 108.232245][ T7039] UDF-fs: Scanning with blocksize 1024 failed [ 108.235903][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 108.238979][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 108.242182][ T7039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 108.244771][ T7039] UDF-fs: Scanning with blocksize 2048 failed [ 108.248805][ T5840] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 108.250604][ T10] usb 6-1: device descriptor read/8, error -71 [ 108.251519][ T5840] usb 5-1: config 1 has no interface number 0 [ 108.255308][ T5840] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 108.260566][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 108.263827][ T5840] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 108.267367][ T7039] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 108.270679][ T5840] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.274267][ T7039] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 108.276800][ T7039] UDF-fs: Scanning with blocksize 4096 failed [ 108.278897][ T7039] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 108.282901][ T5840] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 108.287445][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.290209][ T5840] usb 5-1: Product: syz [ 108.291653][ T5840] usb 5-1: Manufacturer: syz [ 108.293236][ T5840] usb 5-1: SerialNumber: syz [ 108.297270][ T7035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.370528][ T10] usb usb6-port1: unable to enumerate USB device [ 108.753693][ T7035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.962364][ T5840] usb 5-1: Incompatible driver and firmware versions [ 108.971870][ T5840] usb 5-1: USB disconnect, device number 7 [ 109.190973][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.290995][ T7054] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 109.391690][ T7057] FAULT_INJECTION: forcing a failure. [ 109.391690][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.397341][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 109.397367][ T7057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.397378][ T7057] Call Trace: [ 109.397384][ T7057] [ 109.397390][ T7057] dump_stack_lvl+0x100/0x190 [ 109.397415][ T7057] should_fail_ex.cold+0x5/0xa [ 109.397438][ T7057] _copy_from_iter+0x1f4/0x1690 [ 109.397472][ T7057] ? __pfx__copy_from_iter+0x10/0x10 [ 109.397500][ T7057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.397529][ T7057] copy_page_from_iter+0x238/0x300 [ 109.397560][ T7057] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 109.397594][ T7057] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 109.397618][ T7057] ? unwind_get_return_address+0x59/0xa0 [ 109.397642][ T7057] ? arch_stack_walk+0xa6/0xf0 [ 109.397667][ T7057] ? __lock_acquire+0x4a5/0x2630 [ 109.397699][ T7057] tun_get_user+0x16d6/0x3c20 [ 109.397734][ T7057] ? __pfx_tun_get_user+0x10/0x10 [ 109.397759][ T7057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 109.397788][ T7057] ? find_held_lock+0x2b/0x80 [ 109.397809][ T7057] ? tun_get+0x191/0x370 [ 109.397829][ T7057] ? tun_get+0x191/0x370 [ 109.397858][ T7057] tun_chr_write_iter+0xdc/0x200 [ 109.397884][ T7057] vfs_write+0x6ac/0x1070 [ 109.397904][ T7057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 109.397931][ T7057] ? __pfx_vfs_write+0x10/0x10 [ 109.397948][ T7057] ? find_held_lock+0x2b/0x80 [ 109.397986][ T7057] ksys_write+0x12a/0x250 [ 109.398005][ T7057] ? __pfx_ksys_write+0x10/0x10 [ 109.398026][ T7057] ? rcu_is_watching+0x12/0xc0 [ 109.398051][ T7057] do_int80_emulation+0x141/0x700 [ 109.398077][ T7057] asm_int80_emulation+0x1a/0x20 [ 109.398094][ T7057] RIP: 0023:0xf715616b [ 109.398108][ T7057] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 109.398124][ T7057] RSP: 002b:00000000f540d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 109.398140][ T7057] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 109.398151][ T7057] RDX: 00000000000000be RSI: 0000000000000000 RDI: 0000000000000000 [ 109.398160][ T7057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.398169][ T7057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.398179][ T7057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.398202][ T7057] [ 109.453423][ T7060] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 109.587949][ T7062] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 109.693502][ T7075] netlink: 'syz.1.302': attribute type 83 has an invalid length. [ 110.210333][ T5718] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 110.231860][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.360364][ T5718] usb 8-1: Using ep0 maxpacket: 16 [ 110.366989][ T5718] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 110.371648][ T5718] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.376365][ T5718] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.379787][ T5718] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.384526][ T5718] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.389519][ T5718] usb 8-1: config 0 has no interface number 0 [ 110.392218][ T5718] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 110.398086][ T5718] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 110.403504][ T5718] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.409024][ T5718] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.415193][ T5718] usb 8-1: config 0 interface 125 has no altsetting 0 [ 110.418003][ T5718] usb 8-1: config 0 interface 125 has no altsetting 2 [ 110.424668][ T5718] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 110.429532][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.433144][ T5718] usb 8-1: Product: syz [ 110.435026][ T5718] usb 8-1: Manufacturer: syz [ 110.436816][ T5718] usb 8-1: SerialNumber: syz [ 110.441477][ T5718] usb 8-1: config 0 descriptor?? [ 110.448483][ T5718] usb 8-1: selecting invalid altsetting 2 [ 110.727176][ C2] usb 8-1: async_complete: urb error -71 [ 110.728917][ C2] usb 8-1: async_complete: urb error -71 [ 110.730554][ C2] usb 8-1: async_complete: urb error -71 [ 110.732201][ C2] usb 8-1: async_complete: urb error -71 [ 110.734615][ T5718] get_1284_register: usb error -71 [ 110.739638][ T5718] usb 8-1: USB disconnect, device number 5 [ 110.829467][ T7099] FAULT_INJECTION: forcing a failure. [ 110.829467][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.835041][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 110.835062][ T7099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.835073][ T7099] Call Trace: [ 110.835078][ T7099] [ 110.835084][ T7099] dump_stack_lvl+0x100/0x190 [ 110.835109][ T7099] should_fail_ex.cold+0x5/0xa [ 110.835136][ T7099] _copy_to_user+0x32/0xd0 [ 110.835164][ T7099] simple_read_from_buffer+0xcb/0x170 [ 110.835186][ T7099] proc_fail_nth_read+0x1af/0x230 [ 110.835212][ T7099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.835237][ T7099] ? rw_verify_area+0xce/0x6d0 [ 110.835255][ T7099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.835281][ T7099] vfs_read+0x1e4/0xb30 [ 110.835302][ T7099] ? __pfx_vfs_read+0x10/0x10 [ 110.835318][ T7099] ? find_held_lock+0x2b/0x80 [ 110.835341][ T7099] ? __fget_files+0x215/0x3d0 [ 110.835365][ T7099] ? __fget_files+0x21f/0x3d0 [ 110.835391][ T7099] ksys_read+0x12a/0x250 [ 110.835409][ T7099] ? __pfx_ksys_read+0x10/0x10 [ 110.835430][ T7099] ? rcu_is_watching+0x12/0xc0 [ 110.835454][ T7099] do_int80_emulation+0x141/0x700 [ 110.835477][ T7099] asm_int80_emulation+0x1a/0x20 [ 110.835495][ T7099] RIP: 0023:0xf71c616b [ 110.835511][ T7099] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 110.835525][ T7099] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 110.835543][ T7099] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f547d5d0 [ 110.835553][ T7099] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 110.835562][ T7099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.835572][ T7099] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.835581][ T7099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.835604][ T7099] [ 110.983356][ T7097] kAFS: unable to lookup cell '(,c¾ûL' [ 111.067145][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.095731][ T7103] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 111.201147][ T7120] fuse: Unknown parameter 'use00000000000000000000' [ 111.271947][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.322767][ T7126] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 112.312849][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.460267][ T842] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 112.610276][ T842] usb 7-1: Using ep0 maxpacket: 8 [ 112.613862][ T842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.619168][ T842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.622930][ T842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 112.625773][ T842] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.631191][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.637014][ T842] usb 7-1: config 0 descriptor?? [ 112.644154][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.653264][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.870311][ T6529] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.005326][ T842] usbhid 7-1:0.0: can't add hid device: -71 [ 113.010982][ T842] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 113.022571][ T842] usb 7-1: USB disconnect, device number 6 [ 113.132662][ T6529] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.136200][ T6529] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.140053][ T6529] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.143651][ T6529] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.149065][ T6529] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.152868][ T6529] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.155956][ T6529] usb 5-1: Product: syz [ 113.157553][ T6529] usb 5-1: Manufacturer: syz [ 113.163116][ T6529] cdc_wdm 5-1:1.0: skipping garbage [ 113.165250][ T6529] cdc_wdm 5-1:1.0: skipping garbage [ 113.171002][ T6529] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 113.173455][ T6529] cdc_wdm 5-1:1.0: Unknown control protocol [ 113.364389][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.372059][ T5597] usb 5-1: USB disconnect, device number 8 [ 113.434990][ T7153] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 113.513728][ T7163] fuse: Bad value for 'rootmode' [ 113.907143][ T7183] netlink: 432 bytes leftover after parsing attributes in process `syz.0.329'. [ 113.921845][ T7183] binder: 7182:7183 ioctl c00c620f 0 returned -14 [ 113.995633][ T7184] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 114.028229][ T7184] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.032051][ T7184] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 114.071766][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.074717][ T7190] bond2: (slave gretap1): making interface the new active one [ 114.078538][ T7190] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 114.127621][ T7192] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 114.390643][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.398580][ T7198] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 114.410986][ T7198] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 114.606068][ T7201] netlink: 'syz.3.334': attribute type 39 has an invalid length. [ 115.192973][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 115.233688][ T5745] block nbd0: Receive control failed (result -1) [ 115.300066][ T40] audit: type=1326 audit(1777231125.305:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.318998][ T40] audit: type=1326 audit(1777231125.315:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.330694][ T40] audit: type=1326 audit(1777231125.315:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.339629][ T40] audit: type=1326 audit(1777231125.325:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.349597][ T40] audit: type=1326 audit(1777231125.325:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.358657][ T40] audit: type=1326 audit(1777231125.325:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.367363][ T40] audit: type=1326 audit(1777231125.325:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.376663][ T40] audit: type=1326 audit(1777231125.325:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.385922][ T40] audit: type=1326 audit(1777231125.325:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.394899][ T40] audit: type=1326 audit(1777231125.325:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.2.336" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 115.430391][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.177497][ T7224] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 116.245103][ T7226] ISOFS: Unable to identify CD-ROM format. [ 116.293590][ T7228] 9p: Invalid uid '0x00000000ffffffff' [ 116.470605][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.571806][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.863593][ T7247] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 116.882632][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.118262][ T7263] syz.3.354 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.512990][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.521617][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 118.152016][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.310696][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.314337][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.480284][ T7281] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 118.790673][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.869740][ T7292] ip6t_rpfilter: unknown options [ 118.874079][ T7293] ip6t_rpfilter: unknown options [ 118.982313][ T7304] ip6erspan0: entered allmulticast mode [ 119.132647][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.356417][ T7319] vlan0: entered promiscuous mode [ 119.920331][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.101612][ T7334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 120.103719][ T7334] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 120.107837][ T7334] vhci_hcd vhci_hcd.0: Device attached [ 120.214402][ T7334] wg2 speed is unknown, defaulting to 1000 [ 120.220265][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.227558][ T7334] wg2 speed is unknown, defaulting to 1000 [ 120.231085][ T7334] wg2 speed is unknown, defaulting to 1000 [ 120.325440][ T7340] binder: 7337:7340 ioctl 4002f516 0 returned -22 [ 120.380312][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 120.385209][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.389292][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.392794][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 120.397705][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.403091][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.406185][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.513140][ T7344] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 120.564276][ T7345] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 120.669575][ T7334] infiniband syz2: set active [ 120.671578][ T7334] infiniband syz2: added wg2 [ 120.686729][ T7334] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 120.693523][ T7334] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 120.699054][ T7334] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 120.713481][ T6529] wg2 speed is unknown, defaulting to 1000 [ 120.719706][ T39] usb 5-1: GET_CAPABILITIES returned 0 [ 120.722734][ T39] usbtmc 5-1:16.0: can't read capabilities [ 120.945021][ T7354] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 121.012121][ T7334] RDS/IB: syz2: added [ 121.014289][ T34] usb 5-1: USB disconnect, device number 9 [ 121.014691][ T7334] smc: adding ib device syz2 with port count 1 [ 121.014898][ T7335] vhci_hcd: connection closed [ 121.016085][ T1240] vhci_hcd vhci_hcd.3: stop threads [ 121.016105][ T1240] vhci_hcd vhci_hcd.3: release socket [ 121.016136][ T1240] vhci_hcd vhci_hcd.3: disconnect device [ 121.028548][ T7334] smc: ib device syz2 port 1 has pnetid SYZ (user defined) [ 121.037702][ T5881] wg2 speed is unknown, defaulting to 1000 [ 121.039512][ T7359] FAULT_INJECTION: forcing a failure. [ 121.039512][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 121.042374][ T7334] wg2 speed is unknown, defaulting to 1000 [ 121.058998][ T7359] CPU: 2 UID: 0 PID: 7359 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 121.059013][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.059019][ T7359] Call Trace: [ 121.059023][ T7359] [ 121.059027][ T7359] dump_stack_lvl+0x100/0x190 [ 121.059043][ T7359] should_fail_ex.cold+0x5/0xa [ 121.059057][ T7359] should_failslab+0xc2/0x120 [ 121.059070][ T7359] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 121.059086][ T7359] ? skb_clone+0x190/0x400 [ 121.059098][ T7359] skb_clone+0x190/0x400 [ 121.059109][ T7359] netlink_deliver_tap+0xaed/0xcc0 [ 121.059124][ T7359] netlink_unicast+0x62b/0x850 [ 121.059139][ T7359] ? __pfx_netlink_unicast+0x10/0x10 [ 121.059156][ T7359] netlink_sendmsg+0x8b0/0xda0 [ 121.059171][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.059186][ T7359] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 121.059204][ T7359] ____sys_sendmsg+0x9e1/0xb70 [ 121.059216][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.059230][ T7359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.059249][ T7359] ___sys_sendmsg+0x190/0x1e0 [ 121.059263][ T7359] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.059283][ T7359] ? find_held_lock+0x2b/0x80 [ 121.059305][ T7359] __sys_sendmsg+0x170/0x220 [ 121.059315][ T7359] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.059324][ T7359] ? __fget_files+0x21f/0x3d0 [ 121.059339][ T7359] ? ksys_write+0x1ac/0x250 [ 121.059352][ T7359] ? rcu_is_watching+0x12/0xc0 [ 121.059366][ T7359] __do_fast_syscall_32+0xe7/0x950 [ 121.059380][ T7359] ? lockdep_hardirqs_on+0x78/0x100 [ 121.059393][ T7359] do_fast_syscall_32+0x32/0x70 [ 121.059406][ T7359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.059419][ T7359] RIP: 0023:0xf708efcc [ 121.059429][ T7359] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.059438][ T7359] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 121.059449][ T7359] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 121.059455][ T7359] RDX: 0000000024000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.059461][ T7359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.059466][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.059472][ T7359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.059485][ T7359] [ 121.070298][ T10] usb 44-1: enqueue for inactive port 0 [ 121.366942][ T7334] wg2 speed is unknown, defaulting to 1000 [ 121.543025][ T7334] wg2 speed is unknown, defaulting to 1000 [ 121.561263][ T10] usb usb44-port1: attempt power cycle [ 121.727074][ T7334] wg2 speed is unknown, defaulting to 1000 [ 121.803981][ T7379] fuse: Unknown parameter 'user_id00000000000000000000' [ 121.895770][ T7381] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 121.981354][ T7388] sctp: [Deprecated]: syz.3.387 (pid 7388) Use of int in max_burst socket option deprecated. [ 121.981354][ T7388] Use struct sctp_assoc_value instead [ 122.141250][ T10] usb usb44-port1: unable to enumerate USB device [ 122.191703][ T7397] wg2 speed is unknown, defaulting to 1000 [ 122.230357][ T50] net_ratelimit: 8 callbacks suppressed [ 122.230368][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.250123][ T7401] FAULT_INJECTION: forcing a failure. [ 122.250123][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 122.255523][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT(full) [ 122.255545][ T7401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.255555][ T7401] Call Trace: [ 122.255561][ T7401] [ 122.255568][ T7401] dump_stack_lvl+0x100/0x190 [ 122.255592][ T7401] should_fail_ex.cold+0x5/0xa [ 122.255615][ T7401] should_failslab+0xc2/0x120 [ 122.255637][ T7401] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 122.255693][ T7401] ? __alloc_skb+0x140/0x710 [ 122.255718][ T7401] ? __alloc_skb+0x5b7/0x710 [ 122.255747][ T7401] __alloc_skb+0x140/0x710 [ 122.255772][ T7401] ? __alloc_skb+0x5b7/0x710 [ 122.255797][ T7401] ? __pfx___alloc_skb+0x10/0x10 [ 122.255830][ T7401] netlink_ack+0x117/0xb80 [ 122.255860][ T7401] netlink_rcv_skb+0x333/0x420 [ 122.255882][ T7401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.255907][ T7401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.255938][ T7401] ? netlink_deliver_tap+0x1ae/0xcc0 [ 122.255963][ T7401] netlink_unicast+0x585/0x850 [ 122.255988][ T7401] ? __pfx_netlink_unicast+0x10/0x10 [ 122.256016][ T7401] netlink_sendmsg+0x8b0/0xda0 [ 122.256042][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.256065][ T7401] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 122.256093][ T7401] ____sys_sendmsg+0x9e1/0xb70 [ 122.256112][ T7401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.256134][ T7401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.256164][ T7401] ___sys_sendmsg+0x190/0x1e0 [ 122.256186][ T7401] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.256218][ T7401] ? find_held_lock+0x2b/0x80 [ 122.256254][ T7401] __sys_sendmsg+0x170/0x220 [ 122.256274][ T7401] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.256291][ T7401] ? __fget_files+0x21f/0x3d0 [ 122.256316][ T7401] ? ksys_write+0x1ac/0x250 [ 122.256336][ T7401] ? rcu_is_watching+0x12/0xc0 [ 122.256358][ T7401] __do_fast_syscall_32+0xe7/0x950 [ 122.256379][ T7401] ? lockdep_hardirqs_on+0x78/0x100 [ 122.256399][ T7401] do_fast_syscall_32+0x32/0x70 [ 122.256420][ T7401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.256440][ T7401] RIP: 0023:0xf701efcc [ 122.256453][ T7401] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.256468][ T7401] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 122.256484][ T7401] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 122.256510][ T7401] RDX: 0000000024000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.256519][ T7401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.256528][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.256537][ T7401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.256559][ T7401] [ 122.630898][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.707188][ T7417] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 122.951027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.280721][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.480725][ T7443] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.821778][ T7448] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 123.965496][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 124.033870][ T40] kauditd_printk_skb: 574 callbacks suppressed [ 124.033885][ T40] audit: type=1326 audit(1777231134.045:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.407" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 124.310602][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.350393][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.464900][ T7466] tmpfs: Bad value for 'mpol' [ 124.467245][ T7466] openvswitch: netlink: Key type 83 is out of range max 32 [ 124.472597][ T7466] fuse: Unknown parameter 'fD' [ 124.521554][ T39] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 124.524399][ T39] usb 5-1: config 1 has no interface number 0 [ 124.526758][ T39] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 124.530619][ T39] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 124.533968][ T39] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 124.537402][ T39] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 124.542465][ T39] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 124.545761][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.548490][ T39] usb 5-1: Product: syz [ 124.550002][ T39] usb 5-1: Manufacturer: syz [ 124.551876][ T39] usb 5-1: SerialNumber: syz [ 124.555664][ T7451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.559409][ T7451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.565720][ T39] usb 5-1: Error in usbnet_get_endpoints (-22) [ 124.774594][ T39] usb 5-1: USB disconnect, device number 10 [ 125.244079][ T7475] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 125.352521][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.539071][ T7488] fuse: Bad value for 'fd' [ 125.546613][ T7485] random: crng reseeded on system resumption [ 126.001684][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.062270][ T7505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.066187][ T7505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.273958][ T7511] trusted_key: syz.2.420 sent an empty control message without MSG_MORE. [ 126.281226][ T7512] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 126.317646][ T7512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.377803][ T7512] bond3: (slave veth3): Enslaving as an active interface with a down link [ 126.398250][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 126.403444][ T7512] bond3: (slave batadv1): making interface the new active one [ 126.409574][ T7512] batadv1: entered promiscuous mode [ 126.412714][ T7512] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 126.413886][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 126.416201][ T7522] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.424'. [ 126.417092][ T7522] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.424'. [ 126.429827][ T7522] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 126.473640][ T7522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.488115][ T7522] vlan2: entered allmulticast mode [ 126.490012][ T7522] bond2: entered allmulticast mode [ 126.591116][ T7522] bond2: (slave geneve2): making interface the new active one [ 126.593580][ T7522] geneve2: entered allmulticast mode [ 126.597368][ T7522] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 126.657926][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.426'. [ 127.510443][ T5825] net_ratelimit: 5 callbacks suppressed [ 127.510456][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.677156][ T7554] fuse: Bad value for 'fd' [ 127.683757][ T7550] netlink: 84 bytes leftover after parsing attributes in process `syz.1.433'. [ 127.742846][ T7566] Bluetooth: MGMT ver 1.23 [ 128.155722][ T7583] x_tables: duplicate underflow at hook 1 [ 128.550999][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.912894][ T7583] syz.2.437 (7583) used greatest stack depth: 18968 bytes left [ 129.423483][ T7613] fuse: Bad value for 'fd' [ 129.591565][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.650311][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.810247][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 129.814539][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 129.818068][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.823075][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.827192][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.838537][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.843762][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.846862][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.877186][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 129.973536][ T7632] wg2 speed is unknown, defaulting to 1000 [ 130.449735][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 130.465226][ T7646] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 130.642447][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.834639][ T10] usb 6-1: usb_control_msg returned -32 [ 130.836464][ T10] usbtmc 6-1:16.0: can't read capabilities [ 130.838601][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.981894][ T40] audit: type=1326 audit(1777231140.995:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 130.991785][ T40] audit: type=1326 audit(1777231140.995:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.008406][ T40] audit: type=1326 audit(1777231140.995:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.017839][ T40] audit: type=1326 audit(1777231141.005:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.026305][ T40] audit: type=1326 audit(1777231141.005:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.035029][ T40] audit: type=1326 audit(1777231141.005:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.042016][ T40] audit: type=1326 audit(1777231141.005:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.049759][ T40] audit: type=1326 audit(1777231141.005:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.056793][ T40] audit: type=1326 audit(1777231141.005:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 131.063947][ T40] audit: type=1326 audit(1777231141.005:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.2.458" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708efe8 code=0x7ffc0000 [ 131.658326][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.463'. [ 131.671331][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.713786][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 131.842043][ T7678] vlan3: entered promiscuous mode [ 131.843954][ T7678] bridge0: entered promiscuous mode [ 131.945249][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.947722][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.231553][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.331735][ T7642] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 132.333390][ T34] usb 6-1: USB disconnect, device number 9 [ 132.375676][ T7712] overlayfs: missing 'workdir' [ 132.712681][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.542808][ T7758] kernel read not supported for file /eth0 (pid: 7758 comm: syz.0.488) [ 133.821048][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.910413][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.017851][ T7763] wg2 speed is unknown, defaulting to 1000 [ 134.201608][ T7778] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 134.243533][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.329534][ T7786] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.413822][ T7786] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.534831][ T7786] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.688951][ T7786] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.827956][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.836112][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.845719][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.855549][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.880520][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.099442][ T7804] rdma_rxe: rxe_newlink: failed to add lo [ 135.384765][ T7816] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 135.386900][ T7816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.403645][ T7816] vhci_hcd vhci_hcd.0: Device attached [ 135.415328][ T7817] vhci_hcd: connection closed [ 135.417471][ T6274] vhci_hcd vhci_hcd.2: stop threads [ 135.423100][ T6274] vhci_hcd vhci_hcd.2: release socket [ 135.425497][ T6274] vhci_hcd vhci_hcd.2: disconnect device [ 135.438925][ T7820] fuse: Bad value for 'fd' [ 135.561468][ T6529] libceph: connect (1)[c::]:6789 error -101 [ 135.565658][ T6529] libceph: mon0 (1)[c::]:6789 connect error [ 135.575328][ T6529] libceph: connect (1)[c::]:6789 error -101 [ 135.577398][ T6529] libceph: mon0 (1)[c::]:6789 connect error [ 135.687278][ T7824] ceph: No mds server is up or the cluster is laggy [ 135.912302][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.990080][ T7840] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 136.332447][ T7857] comedi comedi3: multiq3: I/O base address or length out of range [ 136.929179][ T40] kauditd_printk_skb: 1619 callbacks suppressed [ 136.929221][ T40] audit: type=1326 audit(1777231146.935:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.938160][ T40] audit: type=1326 audit(1777231146.935:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.946645][ T40] audit: type=1326 audit(1777231146.935:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.954036][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.957048][ T40] audit: type=1326 audit(1777231146.935:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.963891][ T40] audit: type=1326 audit(1777231146.935:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.971216][ T40] audit: type=1326 audit(1777231146.935:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.985820][ T40] audit: type=1326 audit(1777231146.935:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 136.996269][ T40] audit: type=1326 audit(1777231146.945:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 137.004507][ T40] audit: type=1326 audit(1777231146.945:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 137.026835][ T40] audit: type=1326 audit(1777231146.945:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 137.110453][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.114282][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.206339][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.211557][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.353307][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.355311][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.391047][ T7876] fuse: Unknown parameter '0x0000000000000004' [ 137.642248][ T1240] batadv1: left promiscuous mode [ 137.831405][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.838296][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.000438][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.110398][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 138.150620][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.250219][ T34] usb 6-1: device descriptor read/64, error -71 [ 138.348042][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 138.352728][ T7903] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 138.510290][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.615451][ T7914] No control pipe specified [ 138.640244][ T34] usb 6-1: device descriptor read/64, error -71 [ 138.675917][ T7922] 9p: Bad value for 'rfdno' [ 138.760457][ T34] usb usb6-port1: attempt power cycle [ 138.787225][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 138.891861][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.947775][ T7940] binder: 7936:7940 ioctl c0306201 0 returned -14 [ 138.952355][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.957869][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.031227][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.110660][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 139.131636][ T34] usb 6-1: device descriptor read/8, error -71 [ 139.190635][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.390410][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 139.412266][ T34] usb 6-1: device descriptor read/8, error -71 [ 139.520968][ T34] usb usb6-port1: unable to enumerate USB device [ 139.734397][ T7944] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 139.744935][ T7944] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 139.903101][ T7954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.967446][ T7954] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 140.007301][ T7957] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.072167][ T7957] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 140.075915][ T7957] overlayfs: failed to look up (tracing) for ino (-66) [ 140.840219][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 140.874103][ T7968] netlink: 156 bytes leftover after parsing attributes in process `syz.1.539'. [ 141.010248][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 141.016244][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.024284][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 141.031603][ T50] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 141.037060][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.044181][ T50] usb 8-1: Product: syz [ 141.048016][ T50] usb 8-1: Manufacturer: syz [ 141.051102][ T50] usb 8-1: SerialNumber: syz [ 141.056188][ T50] usb 8-1: config 0 descriptor?? [ 141.273648][ C3] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 141.292208][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input23 [ 141.313959][ T50] imon:send_packet: packet tx failed (-71) [ 141.330235][ T50] imon 8-1:0.0: panel buttons/knobs setup failed [ 141.380252][ T50] rc_core: IR keymap rc-imon-pad not found [ 141.382232][ T50] Registered IR keymap rc-empty [ 141.385266][ T50] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 141.389101][ T50] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 141.396496][ T50] imon:send_packet: packet tx failed (-71) [ 141.410356][ T50] imon 8-1:0.0: remote input dev register failed [ 141.413249][ T50] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 141.428421][ T50] imon 8-1:0.0: unable to initialize intf0, err 0 [ 141.431480][ T50] imon:imon_probe: failed to initialize context! [ 141.433600][ T50] imon 8-1:0.0: unable to register, err -19 [ 141.439415][ T50] usb 8-1: USB disconnect, device number 6 [ 141.830371][ T50] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 141.983133][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.986940][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 141.990630][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 141.996391][ T50] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 141.999290][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.003566][ T50] usb 8-1: Product: syz [ 142.004987][ T50] usb 8-1: Manufacturer: syz [ 142.006488][ T50] usb 8-1: SerialNumber: syz [ 142.012730][ T50] usb 8-1: config 0 descriptor?? [ 142.016177][ T7966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.226902][ C3] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 142.231377][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input25 [ 142.434890][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 142.491996][ T50] rc_core: IR keymap rc-imon-pad not found [ 142.493957][ T50] Registered IR keymap rc-empty [ 142.495908][ T50] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 142.500311][ T50] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 142.642520][ T50] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 142.647925][ T50] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input26 [ 142.653242][ T50] imon 8-1:0.0: iMON device (15c2:0045, intf0) on usb<8:7> initialized [ 143.055072][ T8016] netlink: 80 bytes leftover after parsing attributes in process `syz.2.549'. [ 143.114897][ T8018] fuse: Unknown parameter 'gr†óZ!öþ¿ð00000000000000000000' [ 143.200959][ T50] net_ratelimit: 17 callbacks suppressed [ 143.201001][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.360539][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.363200][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.461594][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.466099][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.480287][ T39] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 143.640406][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 143.647312][ T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.651031][ T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.654672][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.658472][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.662540][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.666446][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.676271][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.680072][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.687026][ T39] usb 6-1: config 0 descriptor?? [ 143.900720][ T39] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.913187][ T39] usb 6-1: USB disconnect, device number 14 [ 143.919753][ T39] usblp1: removed [ 143.930332][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.056352][ T8031] sit1: entered allmulticast mode [ 144.230892][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.327020][ T34] IPVS: starting estimator thread 0... [ 144.334057][ T8040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.390415][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.400423][ T39] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 144.420371][ T8041] IPVS: using max 44 ests per chain, 105600 per kthread [ 144.551899][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 144.557925][ T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 144.562214][ T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 144.566219][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 144.570677][ T6293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.570734][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.577434][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.581673][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.587090][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 144.591366][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.595639][ T39] usb 6-1: config 0 descriptor?? [ 144.806356][ T39] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 144.846929][ T7966] imon:send_packet: task interrupted [ 144.849802][ T7966] imon:send_packet: packet tx failed (-512) [ 144.853033][ T7966] imon:lcd_write: send packet failed! [ 144.867237][ T34] usb 8-1: USB disconnect, device number 7 [ 144.985981][ T8049] fuse: Unknown parameter '0x0000000000000003' [ 145.003544][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 145.007236][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'. [ 145.074345][ T34] usb 6-1: USB disconnect, device number 15 [ 145.082582][ T34] usblp1: removed [ 145.707896][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 145.711755][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 145.978230][ T8069] fuse: Bad value for 'user_id' [ 145.979889][ T8069] fuse: Bad value for 'user_id' [ 146.436242][ T8084] fuse: Unknown parameter 'fd0x0000000000000004' [ 147.402745][ T8097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.406501][ T8097] IPv6: NLM_F_CREATE should be set when creating new route [ 147.409432][ T8097] IPv6: NLM_F_CREATE should be set when creating new route [ 147.985282][ T8124] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 147.987351][ T8124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.992652][ T8124] vhci_hcd vhci_hcd.0: Device attached [ 148.279529][ T8143] fuse: Unknown parameter '0x0000000000000005' [ 149.034312][ T50] net_ratelimit: 30 callbacks suppressed [ 149.034325][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.037940][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.080442][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.083270][ T5718] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 149.087310][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.240299][ T5718] usb 8-1: Using ep0 maxpacket: 32 [ 149.243772][ T5718] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.246861][ T5718] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.250249][ T5718] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.256967][ T5718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.260531][ T5718] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.265227][ T5718] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.269347][ T5718] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.273180][ T5718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.278973][ T5718] usb 8-1: config 0 descriptor?? [ 149.490387][ T5718] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.034315][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.034362][ T5840] usb 40-1: SetAddress Request (6) to port 0 [ 150.048054][ T8151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 150.050184][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.052901][ T5840] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 150.059723][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 150.067017][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.070565][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.072199][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.201536][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.201679][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.267876][ T50] usb 8-1: USB disconnect, device number 8 [ 150.272096][ T50] usblp0: removed [ 151.321492][ T8155] vhci_hcd: connection closed [ 151.322040][ T1240] vhci_hcd vhci_hcd.0: stop threads [ 151.327403][ T1240] vhci_hcd vhci_hcd.0: release socket [ 151.329872][ T1240] vhci_hcd vhci_hcd.0: disconnect device [ 151.345169][ T8125] vhci_hcd: connection reset by peer [ 151.348880][ T1240] vhci_hcd vhci_hcd.1: stop threads [ 151.351507][ T1240] vhci_hcd vhci_hcd.1: release socket [ 151.353886][ T1240] vhci_hcd vhci_hcd.1: disconnect device [ 151.370385][ T5597] usb 38-1: enqueue for inactive port 0 [ 151.601924][ T8170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 151.706282][ T8165] wg2 speed is unknown, defaulting to 1000 [ 151.810838][ T8177] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 152.158641][ T5597] usb usb38-port1: attempt power cycle [ 152.801036][ T5597] usb usb38-port1: unable to enumerate USB device [ 152.920329][ T50] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 153.080220][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 153.083306][ T50] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 153.086888][ T50] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.089852][ T50] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.094204][ T50] usb 6-1: config 1 interface 0 has no altsetting 0 [ 153.098040][ T50] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 153.101993][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.104655][ T50] usb 6-1: Product: ဇ [ 153.105987][ T50] usb 6-1: Manufacturer:   [ 153.107768][ T50] usb 6-1: SerialNumber: à¡¡ [ 153.325329][ T50] usbhid 6-1:1.0: can't add hid device: -71 [ 153.327331][ T50] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 153.331837][ T50] usb 6-1: USB disconnect, device number 16 [ 153.410327][ T5818] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 153.470231][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 153.470248][ T40] audit: type=1326 audit(1777231163.475:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.483846][ T40] audit: type=1326 audit(1777231163.475:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.491828][ T8221] qnx6: unable to read the first superblock [ 153.491846][ T40] audit: type=1326 audit(1777231163.475:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.495608][ T40] audit: type=1326 audit(1777231163.485:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.507207][ T40] audit: type=1326 audit(1777231163.485:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.514186][ T40] audit: type=1326 audit(1777231163.485:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.521291][ T40] audit: type=1326 audit(1777231163.485:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.528278][ T40] audit: type=1326 audit(1777231163.485:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.534427][ T5745] Bluetooth: Frame is too long (len 16, expected len 4) [ 153.535395][ T40] audit: type=1326 audit(1777231163.485:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.546051][ T40] audit: type=1326 audit(1777231163.485:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.2.602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 153.570283][ T5818] usb 8-1: Using ep0 maxpacket: 8 [ 153.574536][ T5818] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 153.578201][ T5818] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.586315][ T5818] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.591632][ T5818] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.595800][ T5818] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.601643][ T5818] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.605353][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.814922][ T5818] usb 8-1: usb_control_msg returned -32 [ 153.817809][ T5818] usbtmc 8-1:16.0: can't read capabilities [ 153.978512][ T8228] binder: 8227:8228 ioctl 4018620d 0 returned -22 [ 154.019711][ T5818] usb 8-1: USB disconnect, device number 9 [ 154.112438][ T8231] x_tables: duplicate underflow at hook 2 [ 154.230471][ T5825] net_ratelimit: 15 callbacks suppressed [ 154.230483][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.235190][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.249185][ T8233] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 154.741319][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.745130][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.110353][ T5840] usb 40-1: device descriptor read/8, error -110 [ 155.275801][ T5597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.281024][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.554135][ T5840] usb usb40-port1: attempt power cycle [ 155.881124][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.888058][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.995869][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.156340][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.196270][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 156.251308][ T8272] wg2 speed is unknown, defaulting to 1000 [ 157.115891][ T5840] usb usb40-port1: unable to enumerate USB device [ 157.853561][ T8303] FAULT_INJECTION: forcing a failure. [ 157.853561][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.874091][ T8303] CPU: 3 UID: 0 PID: 8303 Comm: syz.2.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.874119][ T8303] Tainted: [L]=SOFTLOCKUP [ 157.874125][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.874135][ T8303] Call Trace: [ 157.874142][ T8303] [ 157.874149][ T8303] dump_stack_lvl+0x100/0x190 [ 157.874175][ T8303] should_fail_ex.cold+0x5/0xa [ 157.874198][ T8303] _copy_to_user+0x32/0xd0 [ 157.874228][ T8303] simple_read_from_buffer+0xcb/0x170 [ 157.874250][ T8303] proc_fail_nth_read+0x1af/0x230 [ 157.874279][ T8303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.874322][ T8303] ? rw_verify_area+0xce/0x6d0 [ 157.874340][ T8303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.874366][ T8303] vfs_read+0x1e4/0xb30 [ 157.874386][ T8303] ? __pfx_vfs_read+0x10/0x10 [ 157.874404][ T8303] ? find_held_lock+0x2b/0x80 [ 157.874426][ T8303] ? __fget_files+0x215/0x3d0 [ 157.874449][ T8303] ? __fget_files+0x21f/0x3d0 [ 157.874475][ T8303] ksys_read+0x12a/0x250 [ 157.874493][ T8303] ? __pfx_ksys_read+0x10/0x10 [ 157.874512][ T8303] ? rcu_is_watching+0x12/0xc0 [ 157.874533][ T8303] ? rcu_is_watching+0x12/0xc0 [ 157.874557][ T8303] do_int80_emulation+0x141/0x700 [ 157.874583][ T8303] asm_int80_emulation+0x1a/0x20 [ 157.874602][ T8303] RIP: 0023:0xf71c616b [ 157.874617][ T8303] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 157.874644][ T8303] RSP: 002b:00000000f543b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 157.874662][ T8303] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f543b5d0 [ 157.874672][ T8303] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 157.874682][ T8303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.874692][ T8303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.874702][ T8303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.874726][ T8303] [ 158.526457][ T8335] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 158.531148][ T8335] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 158.536711][ T8335] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 158.547211][ T8335] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.567227][ T8335] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 158.777755][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 159.412434][ T5825] net_ratelimit: 10 callbacks suppressed [ 159.412455][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.434294][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 159.740531][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.744217][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.050407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 160.100488][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.102524][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.209854][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.307168][ T8365] fuse: Unknown parameter 'fd0x0000000000000003' [ 160.325754][ T8367] netlink: 76 bytes leftover after parsing attributes in process `syz.3.637'. [ 160.400423][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.480875][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.860438][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.864203][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.400291][ T34] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 161.575236][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.579704][ T34] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 161.583677][ T34] usb 6-1: config 129 has no interface number 0 [ 161.586438][ T34] usb 6-1: config 129 interface 4 altsetting 9 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 161.591882][ T34] usb 6-1: config 129 interface 4 has no altsetting 0 [ 161.598193][ T34] usb 6-1: string descriptor 0 read error: -22 [ 161.601311][ T34] usb 6-1: New USB device found, idVendor=19d2, idProduct=2002, bcdDevice=17.4e [ 161.605287][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.611915][ T8394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.752487][ T8397] netlink: 252 bytes leftover after parsing attributes in process `syz.3.643'. [ 161.816413][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.819279][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.822838][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.828847][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.831375][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.836252][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.843424][ T5840] usb 6-1: USB disconnect, device number 17 [ 161.848499][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 161.960303][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.964065][ T8406] wg2 speed is unknown, defaulting to 1000 [ 162.110252][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 162.115404][ T29] usb 5-1: config 0 has no interfaces? [ 162.117496][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 162.120931][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.126116][ T29] usb 5-1: config 0 descriptor?? [ 162.130953][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 162.281660][ T9] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 162.285201][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 162.289093][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.292288][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.294885][ T9] usb 7-1: Product: syz [ 162.296209][ T9] usb 7-1: Manufacturer: syz [ 162.297959][ T9] usb 7-1: SerialNumber: syz [ 162.304298][ T9] usb 7-1: config 0 descriptor?? [ 162.306958][ T8405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.315794][ T9] usb 7-1: selecting invalid altsetting 0 [ 162.669565][ T34] usb 7-1: USB disconnect, device number 7 [ 163.218257][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 163.218279][ T40] audit: type=1326 audit(1777231173.225:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.652" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 163.390840][ T29] usb 5-1: USB disconnect, device number 11 [ 163.594782][ T8448] syzkaller0: entered promiscuous mode [ 163.597236][ T8448] syzkaller0: entered allmulticast mode [ 164.382110][ T8467] wg2 speed is unknown, defaulting to 1000 [ 164.630421][ T5825] net_ratelimit: 25 callbacks suppressed [ 164.630441][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.100295][ T5718] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 165.134022][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.250375][ T5718] usb 6-1: device descriptor read/64, error -71 [ 165.500280][ T5718] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 165.512693][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.551194][ T6293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.555202][ T6293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.640264][ T5718] usb 6-1: device descriptor read/64, error -71 [ 165.887288][ T5718] usb usb6-port1: attempt power cycle [ 166.153331][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.230371][ T5718] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 166.260784][ T5718] usb 6-1: device descriptor read/8, error -71 [ 166.310402][ T6529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.510246][ T5718] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 166.530885][ T5718] usb 6-1: device descriptor read/8, error -71 [ 166.570279][ T8466] x_tables: duplicate underflow at hook 1 [ 166.650851][ T5718] usb usb6-port1: unable to enumerate USB device [ 166.705988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.709063][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.780557][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.328395][ T8483] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 167.591393][ T40] audit: type=1326 audit(1777231177.605:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz.3.669" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f95fcc code=0x0 [ 168.615068][ T8527] xt_bpf: check failed: parse error [ 168.624460][ T8527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 168.628172][ T8527] overlayfs: failed to set xattr on upper [ 168.630701][ T8527] overlayfs: ...falling back to redirect_dir=nofollow. [ 168.634890][ T8527] overlayfs: ...falling back to index=off. [ 168.637392][ T8527] overlayfs: ...falling back to uuid=null. [ 168.656649][ T8527] overlayfs: cleanup of 'bus/work' failed (-13) [ 168.661164][ T8527] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 168.665284][ T8527] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 168.672167][ T8527] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 168.730340][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 168.860413][ T34] usb 7-1: device descriptor read/64, error -71 [ 169.001456][ T8536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.086227][ T8532] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 169.101386][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 169.118921][ T8532] bond4: entered promiscuous mode [ 169.121452][ T8532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.189654][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 169.202547][ T8539] wg2 speed is unknown, defaulting to 1000 [ 169.230252][ T34] usb 7-1: device descriptor read/64, error -71 [ 169.340639][ T34] usb usb7-port1: attempt power cycle [ 169.691807][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 169.700624][ T8556] net_ratelimit: 6 callbacks suppressed [ 169.700635][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.722317][ T8558] comedi comedi4: bad chanlist[0]=0x000000f1 chan=241 range length=2 [ 169.723673][ T34] usb 7-1: device descriptor read/8, error -71 [ 169.753732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.817523][ T8569] netlink: 136 bytes leftover after parsing attributes in process `syz.0.684'. [ 169.820498][ T8569] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 169.980275][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 170.000787][ T34] usb 7-1: device descriptor read/8, error -71 [ 170.093156][ T8580] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 170.110732][ T34] usb usb7-port1: unable to enumerate USB device [ 170.155630][ T8584] tmpfs: Bad value for 'mpol' [ 170.312986][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.341879][ T8585] /dev/sr0: Can't open blockdev [ 170.480383][ T8604] netlink: 'syz.3.692': attribute type 3 has an invalid length. [ 170.485573][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 170.502897][ T8606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.518753][ T8604] Cannot find set identified by id 0 to match [ 170.557583][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 170.693924][ T8615] netlink: 124 bytes leftover after parsing attributes in process `syz.1.694'. [ 171.280856][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.350746][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.569422][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.696975][ T8632] netlink: 43 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.703462][ T8632] netlink: 'syz.1.699': attribute type 6 has an invalid length. [ 171.716876][ T8632] netlink: 'syz.1.699': attribute type 5 has an invalid length. [ 171.728107][ T8632] netlink: 43 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.738122][ T8636] netlink: 39 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.748581][ T8636] netlink: 1 bytes leftover after parsing attributes in process `syz.1.699'. [ 171.905714][ T8642] bridge_slave_0: left allmulticast mode [ 171.910586][ T8642] bridge_slave_0: left promiscuous mode [ 171.918215][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.022020][ T8642] bridge_slave_1: left allmulticast mode [ 172.026634][ T8642] bridge_slave_1: left promiscuous mode [ 172.034521][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.077545][ T8642] bond0: (slave bond_slave_0): Releasing backup interface [ 172.116893][ T8649] fuse: Bad value for 'fd' [ 172.150000][ T8642] bond0: (slave bond_slave_1): Releasing backup interface [ 172.203182][ T8642] team0: Port device team_slave_0 removed [ 172.233296][ T8642] team0: Port device team_slave_1 removed [ 172.240766][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.245977][ T8642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.271625][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.277892][ T8642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.307045][ T8642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.357132][ T5597] wg2 speed is unknown, defaulting to 1000 [ 172.390636][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.572605][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.581418][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.589914][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.596603][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.603846][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.793712][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.958260][ T8652] wg2 speed is unknown, defaulting to 1000 [ 172.968145][ T8671] netlink: 'syz.3.710': attribute type 3 has an invalid length. [ 172.973855][ T8671] netlink: 'syz.3.710': attribute type 3 has an invalid length. [ 173.094393][ T8676] overlayfs: missing 'workdir' [ 173.135336][ T8678] netlink: 'syz.1.713': attribute type 18 has an invalid length. [ 173.139233][ T8678] netlink: 'syz.1.713': attribute type 15 has an invalid length. [ 173.191078][ T8683] fuse: Unknown parameter '' [ 173.459096][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.461662][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.464448][ T8652] bridge_slave_0: entered allmulticast mode [ 173.468308][ T8652] bridge_slave_0: entered promiscuous mode [ 173.475838][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.479075][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.481936][ T8652] bridge_slave_1: entered allmulticast mode [ 173.486547][ T8652] bridge_slave_1: entered promiscuous mode [ 173.525347][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.534058][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.564185][ T8652] team0: Port device team_slave_0 added [ 173.570264][ T8652] team0: Port device team_slave_1 added [ 173.601441][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.604388][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.613756][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.618079][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.620785][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.630548][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.668277][ T8652] hsr_slave_0: entered promiscuous mode [ 173.670685][ T8652] hsr_slave_1: entered promiscuous mode [ 173.672791][ T8652] debugfs: 'hsr0' already exists in 'hsr' [ 173.674882][ T8652] Cannot create hsr debugfs directory [ 173.799763][ T8652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.804845][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.807704][ T8652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.812437][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.815196][ T8652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.819012][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.823491][ T8652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.827395][ T8652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.893552][ T8700] binder: 8699:8700 ioctl 4018620d 0 returned -22 [ 173.897109][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.898449][ T8700] binder: 8699:8700 ioctl c0306201 80000000 returned -11 [ 173.908596][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.917983][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.920482][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.926934][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.929255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.243790][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.439777][ T8652] veth0_vlan: entered promiscuous mode [ 174.447363][ T8652] veth1_vlan: entered promiscuous mode [ 174.465458][ T8652] veth0_macvtap: entered promiscuous mode [ 174.471805][ T8652] veth1_macvtap: entered promiscuous mode [ 174.486728][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.495990][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.506692][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.509611][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.514281][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.517317][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.604321][ T8721] siw: device registration error -23 [ 174.630686][ T62] Bluetooth: hci2: command tx timeout [ 174.675906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.685659][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.734012][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.738766][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.905762][ T8725] wg2 speed is unknown, defaulting to 1000 [ 174.980290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 175.295351][ T8726] wg2 speed is unknown, defaulting to 1000 [ 175.512692][ T34] net_ratelimit: 3 callbacks suppressed [ 175.512708][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.790816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.831566][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.867900][ T8758] __nla_validate_parse: 4 callbacks suppressed [ 175.867934][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 176.710274][ T62] Bluetooth: hci2: command tx timeout [ 177.153425][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.892285][ T5818] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 178.016105][ T8788] netlink: 'syz.1.733': attribute type 3 has an invalid length. [ 178.017532][ T8789] syz_tun: refused to change device tx_queue_len [ 178.019229][ T8788] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 178.022044][ T8789] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 178.025389][ T8788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.733'. [ 178.062392][ T5818] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.068636][ T5818] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.080245][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.087767][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.103728][ T8796] netlink: 68 bytes leftover after parsing attributes in process `syz.1.734'. [ 178.125046][ T8799] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 178.230878][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.252699][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.259642][ T5818] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.264090][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.266572][ T5818] usb 7-1: Product: syz [ 178.267922][ T5818] usb 7-1: Manufacturer: syz [ 178.273023][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 178.274786][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 178.277496][ T5818] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 178.279528][ T5818] cdc_wdm 7-1:1.0: Unknown control protocol [ 178.290462][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 178.502707][ T8809] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 178.504826][ T8809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.508359][ T8809] vhci_hcd vhci_hcd.0: Device attached [ 178.790422][ T5745] Bluetooth: hci2: command tx timeout [ 178.810672][ T5597] usb 46-1: SetAddress Request (2) to port 0 [ 178.811244][ T5597] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.881176][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.270864][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.403810][ T8815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.137002][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 180.187229][ T8810] vhci_hcd: connection reset by peer [ 180.198684][ T6273] vhci_hcd vhci_hcd.4: stop threads [ 180.201550][ T6273] vhci_hcd vhci_hcd.4: release socket [ 180.216996][ T6273] vhci_hcd vhci_hcd.4: disconnect device [ 180.298044][ T8834] wg2 speed is unknown, defaulting to 1000 [ 180.310510][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.390248][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 180.710218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 180.787902][ T9] usb 7-1: USB disconnect, device number 12 [ 180.870560][ T62] Bluetooth: hci2: command tx timeout [ 180.870767][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.944358][ T8839] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 181.065346][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.069561][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.073492][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.078018][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.081056][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.084568][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.085298][ T8851] netlink: 452 bytes leftover after parsing attributes in process `syz.1.744'. [ 181.088516][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.093686][ T8848] wg2 speed is unknown, defaulting to 1000 [ 181.130245][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.134438][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.206870][ T40] audit: type=1326 audit(1777231191.215:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.215253][ T40] audit: type=1326 audit(1777231191.215:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.224752][ T40] audit: type=1326 audit(1777231191.225:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.241673][ T40] audit: type=1326 audit(1777231191.225:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.248935][ T40] audit: type=1326 audit(1777231191.225:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.256487][ T40] audit: type=1326 audit(1777231191.225:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.265409][ T8733] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 181.268306][ T40] audit: type=1326 audit(1777231191.225:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.269796][ T8852] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 181.290344][ T40] audit: type=1326 audit(1777231191.225:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.298194][ T40] audit: type=1326 audit(1777231191.235:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.305239][ T40] audit: type=1326 audit(1777231191.235:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.4.746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fcc code=0x7ffc0000 [ 181.411709][ T8733] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 181.414515][ T8733] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.417856][ T8733] usb 8-1: config 0 has no interfaces? [ 181.420511][ T8733] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 181.424520][ T8733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.430791][ T8733] usb 8-1: config 0 descriptor?? [ 181.958738][ T34] usb 8-1: USB disconnect, device number 10 [ 182.058049][ T8890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 183.320255][ T39] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 183.493220][ T39] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.496795][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.500914][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.504581][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.511625][ T39] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.515543][ T39] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.518714][ T39] usb 7-1: Product: syz [ 183.520292][ T39] usb 7-1: Manufacturer: syz [ 183.527328][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 183.529096][ T39] cdc_wdm 7-1:1.0: skipping garbage [ 183.534738][ T39] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 183.537197][ T39] cdc_wdm 7-1:1.0: Unknown control protocol [ 183.911461][ T5597] usb 46-1: device descriptor read/8, error -110 [ 184.082801][ T8933] sit1: entered allmulticast mode [ 184.310706][ T5597] usb usb46-port1: attempt power cycle [ 184.727578][ T8965] 9p: Bad value for 'rfdno' [ 184.903146][ T5597] usb usb46-port1: unable to enumerate USB device [ 185.752861][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.782'. [ 185.756504][ T8979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.782'. [ 185.767018][ T8981] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 185.773020][ T8981] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 185.788350][ T9] libceph: connect (1)[c::]:6789 error -101 [ 185.791266][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 185.794084][ T10] libceph: connect (1)[c::]:6789 error -101 [ 185.794778][ T8981] vlan2: entered allmulticast mode [ 185.797744][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 185.798463][ T8981] veth0_to_bond: entered allmulticast mode [ 185.909575][ T8989] cgroup: fork rejected by pids controller in /syz1 [ 185.920363][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 185.941820][ T8983] ceph: No mds server is up or the cluster is laggy [ 186.072135][ T9] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 186.076244][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.077331][ T5597] usb 7-1: USB disconnect, device number 13 [ 186.079483][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 186.091706][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.096494][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.099213][ T9] usb 9-1: Product: syz [ 186.103663][ T9] usb 9-1: Manufacturer: syz [ 186.105379][ T9] usb 9-1: SerialNumber: syz [ 186.109689][ T5741] bond0: (slave syz_tun): Releasing backup interface [ 186.111376][ T9] usb 9-1: config 0 descriptor?? [ 186.116433][ T9] hub 9-1:0.0: bad descriptor, ignoring hub [ 186.118654][ T9] hub 9-1:0.0: probe with driver hub failed with error -5 [ 186.124897][ T9] usb 9-1: selecting invalid altsetting 0 [ 186.232703][ T101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.315457][ T101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.408325][ T101] team0: Port device netdevsim1 removed [ 186.412475][ T101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.482296][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.490746][ T101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.491290][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.503645][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.508455][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.512291][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.697080][ T101] bridge_slave_1: left allmulticast mode [ 186.702609][ T101] bridge_slave_1: left promiscuous mode [ 186.706518][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.713154][ T101] bridge_slave_0: left allmulticast mode [ 186.715639][ T101] bridge_slave_0: left promiscuous mode [ 186.719956][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.750882][ T8976] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 186.823813][ T101] bond2 (unregistering): (slave gretap1): Releasing active interface [ 186.923959][ T8976] usb 9-1: device firmware changed [ 186.927645][ T5597] usb 9-1: USB disconnect, device number 2 [ 186.965228][ T101] bond0 (unregistering): left promiscuous mode [ 186.967262][ T101] bond_slave_0: left promiscuous mode [ 186.969164][ T101] bond_slave_1: left promiscuous mode [ 186.976191][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.982370][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.987341][ T101] bond0 (unregistering): Released all slaves [ 186.993857][ T101] bond1 (unregistering): Released all slaves [ 187.001736][ T101] bond2 (unregistering): Released all slaves [ 187.009438][ T101] bond3 (unregistering): (slave veth3): Releasing active interface [ 187.012175][ T101] batadv1: entered promiscuous mode [ 187.024652][ T101] bond3 (unregistering): (slave batadv1): Releasing active interface [ 187.030023][ T101] bond3 (unregistering): Released all slaves [ 187.042343][ T101] bond4 (unregistering): Released all slaves [ 187.090488][ T5597] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 187.230018][ T9013] wg2 speed is unknown, defaulting to 1000 [ 187.251999][ T5597] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 187.270626][ T5597] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 187.277596][ T5597] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.296382][ T5597] usb 9-1: string descriptor 0 read error: -22 [ 187.301354][ T5597] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 187.310579][ T5597] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 187.323064][ T5597] usb 9-1: config 0 descriptor?? [ 187.336558][ T5597] hub 9-1:0.0: bad descriptor, ignoring hub [ 187.345790][ T5597] hub 9-1:0.0: probe with driver hub failed with error -5 [ 187.363527][ T5597] usb 9-1: selecting invalid altsetting 0 [ 187.494910][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 187.494952][ T40] audit: type=1326 audit(1777231197.495:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.2.794" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efcc code=0x0 [ 187.627466][ T5597] usb 9-1: USB disconnect, device number 3 [ 187.697176][ T9050] 9pnet_fd: p9_fd_create_unix (9050): problem connecting socket: ./file0/file0: -2 [ 187.812108][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.850355][ T9049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.797'. [ 188.557108][ T62] Bluetooth: hci3: command tx timeout [ 188.581665][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 188.584685][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 188.587488][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 188.590397][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 188.651312][ T9085] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 188.653448][ T9085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.667406][ T101] batadv0: left promiscuous mode [ 188.678730][ T9085] vhci_hcd vhci_hcd.0: Device attached [ 188.682008][ T101] hsr_slave_0: left promiscuous mode [ 188.686052][ T101] hsr_slave_1: left promiscuous mode [ 188.688378][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.693619][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.717178][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.718924][ T9090] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 188.728248][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.765813][ T101] dummy0: left promiscuous mode [ 188.766154][ T101] veth1_macvtap: left promiscuous mode [ 188.767116][ T101] veth0_macvtap: left promiscuous mode [ 188.767255][ T101] veth1_vlan: left promiscuous mode [ 188.767461][ T101] veth0_vlan: left promiscuous mode [ 188.826601][ T9085] rdma_rxe: rxe_newlink: failed to add wg2 [ 188.960296][ T5840] usb 42-1: SetAddress Request (6) to port 0 [ 188.961915][ T13] smbdirect: ib_dev[syz0] removed [ 188.965944][ T5840] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 189.024984][ T101] team0 (unregistering): Port device team_slave_1 removed [ 189.033229][ T101] team0 (unregistering): Port device team_slave_0 removed [ 189.042450][ T9086] vhci_hcd: connection reset by peer [ 189.044590][ T6273] vhci_hcd vhci_hcd.2: stop threads [ 189.046838][ T6273] vhci_hcd vhci_hcd.2: release socket [ 189.049520][ T6273] vhci_hcd vhci_hcd.2: disconnect device [ 189.185092][ T9102] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 190.034772][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.041837][ T9090] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 190.054055][ T6529] infiniband syz0: ib_query_port failed (-19) [ 190.100957][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.103929][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.107080][ T9013] bridge_slave_0: entered allmulticast mode [ 190.111194][ T9013] bridge_slave_0: entered promiscuous mode [ 190.121279][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.124386][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.127241][ T9013] bridge_slave_1: entered allmulticast mode [ 190.131106][ T9013] bridge_slave_1: entered promiscuous mode [ 190.164423][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.172899][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.212384][ T9013] team0: Port device team_slave_0 added [ 190.217307][ T9013] team0: Port device team_slave_1 added [ 190.238028][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.245309][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.263703][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.268826][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.274258][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.303430][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.385013][ T9013] hsr_slave_0: entered promiscuous mode [ 190.391554][ T9013] hsr_slave_1: entered promiscuous mode [ 190.402607][ T9013] debugfs: 'hsr0' already exists in 'hsr' [ 190.404600][ T9013] Cannot create hsr debugfs directory [ 190.525658][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 190.542370][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 190.542527][ T9130] ubi16: attaching mtd0 [ 190.608819][ T9133] overlayfs: failed to resolve './file1': -2 [ 190.615539][ T9130] ubi16: scanning is finished [ 190.617557][ T9130] ubi16: empty MTD device detected [ 190.630443][ T62] Bluetooth: hci3: command tx timeout [ 190.917700][ T9150] IPVS: set_ctl: invalid protocol: 22 172.20.20.44:20001 [ 191.156808][ T9130] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.161562][ T9130] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.164999][ T9130] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.171649][ T9130] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 191.178277][ T9130] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.196260][ T9130] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.207315][ T9130] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2644781735 [ 191.219124][ T9130] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.229542][ T9167] ubi16: background thread "ubi_bgt16d" started, PID 9167 [ 191.309829][ T9013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.347450][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.354930][ T9013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.367939][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.372384][ T9013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.394273][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.404108][ T9013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.415982][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.511011][ T9173] can0: slcan on ttyS3. [ 191.527382][ T9164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 191.558053][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.635352][ T9013] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.661036][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.663496][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.688994][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.691655][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.744842][ T9013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.755837][ T9013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.230110][ T9189] batman_adv: batadv0: Interface deactivated: gretap1 [ 192.241245][ T9189] bond2: left allmulticast mode [ 192.342295][ T842] wg2 speed is unknown, defaulting to 1000 [ 192.343226][ T171] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.382191][ T171] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.401619][ T9157] can0 (unregistered): slcan off ttyS3. [ 192.432243][ T171] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.462559][ T171] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.522108][ T9205] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 192.610358][ T39] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 192.693356][ T842] syz2: Port: 1 Link DOWN [ 192.711065][ T62] Bluetooth: hci3: command tx timeout [ 192.770556][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 192.781937][ T39] usb 8-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.788172][ T39] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.797210][ T39] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 192.816073][ T39] usb 8-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 192.821909][ T39] usb 8-1: config 1 interface 0 has no altsetting 0 [ 192.830249][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.833780][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.836728][ T39] usb 8-1: Product: syz [ 192.838153][ T39] usb 8-1: Manufacturer: syz [ 192.839837][ T39] usb 8-1: SerialNumber: syz [ 192.862736][ T9202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.228006][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.278098][ T9013] veth0_vlan: entered promiscuous mode [ 193.284143][ T9013] veth1_vlan: entered promiscuous mode [ 193.309211][ T9013] veth0_macvtap: entered promiscuous mode [ 193.323813][ T9013] veth1_macvtap: entered promiscuous mode [ 193.378452][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.428842][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.455750][ T171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.462336][ T171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.509403][ T171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.523512][ T171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.629117][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.634609][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.684888][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.695044][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.072663][ T5840] usb 42-1: device descriptor read/8, error -110 [ 194.471434][ T8542] wg2 speed is unknown, defaulting to 1000 [ 194.493706][ T5840] usb usb42-port1: attempt power cycle [ 194.790342][ T5745] Bluetooth: hci3: command tx timeout [ 195.071120][ T5840] usb usb42-port1: unable to enumerate USB device [ 195.529271][ T39] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 195.543985][ T39] usb 8-1: USB disconnect, device number 11 [ 196.043428][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 196.057889][ T5840] IPVS: starting estimator thread 0... [ 196.064335][ T9278] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 196.068101][ T9278] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 196.071937][ T9278] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 196.160875][ T9280] IPVS: using max 45 ests per chain, 108000 per kthread [ 196.403800][ T9293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 196.405892][ T9293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.409988][ T9293] vhci_hcd vhci_hcd.0: Device attached [ 196.479651][ T9294] vhci_hcd: connection closed [ 196.479865][ T6293] vhci_hcd vhci_hcd.4: stop threads [ 196.486404][ T6293] vhci_hcd vhci_hcd.4: release socket [ 196.488278][ T6293] vhci_hcd vhci_hcd.4: disconnect device [ 196.967792][ T9302] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.012146][ T9304] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 197.025818][ T9304] bond4: entered promiscuous mode [ 197.028349][ T9304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.039820][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 197.043087][ T9304] bond4: entered allmulticast mode [ 197.057654][ T9304] bond4: (slave bridge2): making interface the new active one [ 197.061816][ T9304] bridge2: entered promiscuous mode [ 197.063637][ T9304] bridge2: entered allmulticast mode [ 197.066614][ T9304] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 197.302881][ T9315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.588264][ T9342] netlink: 10 bytes leftover after parsing attributes in process `syz.2.850'. [ 197.895307][ T9362] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 198.383852][ T9374] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.857'. [ 198.510293][ T9359] nbd1: detected capacity change from 0 to 128 [ 198.599757][ T5745] block nbd1: Receive control failed (result -104) [ 198.603616][ T62] block nbd1: Receive control failed (result -32) [ 198.758571][ T842] hid (null): unknown global tag 0xd [ 198.764676][ T842] hid (null): invalid report_size 2007119091 [ 198.772959][ T842] hid (null): global environment stack underflow [ 198.777862][ T842] hid (null): unknown global tag 0xd [ 198.782556][ T842] hid (null): invalid report_count 127810890 [ 198.786943][ T842] hid (null): unknown global tag 0xe [ 198.789287][ T842] hid (null): unknown global tag 0xe [ 198.792130][ T842] hid (null): unknown global tag 0xd [ 198.795255][ T842] hid (null): unknown global tag 0xc [ 198.797542][ T842] hid (null): unknown global tag 0x98 [ 198.799805][ T842] hid (null): unknown global tag 0xe [ 198.808190][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.810233][ T842] hid (null): unknown global tag 0xd [ 198.811905][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.813097][ T842] hid (null): report_id 1542226256 is invalid [ 198.818289][ T842] hid (null): invalid report_size 46358 [ 198.827667][ T842] hid (null): unknown global tag 0xe [ 198.831668][ T842] hid (null): unknown global tag 0xe [ 198.834596][ T842] hid (null): report_id 0 is invalid [ 198.836867][ T842] hid (null): bogus close delimiter [ 198.839090][ T842] hid (null): report_id 0 is invalid [ 198.842667][ T842] hid (null): bogus close delimiter [ 198.844448][ T842] hid (null): unknown global tag 0xd [ 198.846206][ T842] hid (null): unknown global tag 0xf1 [ 198.848014][ T842] hid (null): unknown global tag 0xd [ 198.849706][ T842] hid (null): unknown global tag 0xc [ 198.850707][ C1] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 198.851816][ T842] hid (null): invalid report_count 792237255 [ 198.855794][ C1] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 198.857802][ T842] hid (null): invalid report_size 23022 [ 198.863912][ T842] hid (null): unknown global tag 0xd [ 198.865693][ T842] hid (null): report_id 0 is invalid [ 198.867504][ T842] hid (null): unknown global tag 0xc [ 198.869331][ T842] hid (null): unknown global tag 0xd [ 198.872130][ T842] hid (null): unknown global tag 0xb1 [ 198.874399][ T842] hid (null): unknown global tag 0xd [ 198.876123][ T842] hid (null): unknown global tag 0xc [ 198.878048][ T842] hid (null): unknown global tag 0x4d [ 198.879768][ T842] hid (null): unknown global tag 0xd [ 198.881817][ T842] hid (null): report_id 0 is invalid [ 198.883782][ T842] hid (null): report_id 3061143289 is invalid [ 198.885803][ T842] hid (null): unknown global tag 0xd [ 198.887548][ T842] hid (null): bogus close delimiter [ 198.889231][ T842] hid (null): unknown global tag 0xe [ 198.902415][ T842] hid-generic 0003:0008:000C.0005: unknown global tag 0xd [ 198.909007][ T842] hid-generic 0003:0008:000C.0005: item 0 4 1 13 parsing failed [ 198.915484][ T842] hid-generic 0003:0008:000C.0005: probe with driver hid-generic failed with error -22 [ 198.923617][ T842] [ 198.924418][ T842] ====================================================== [ 198.926600][ T842] WARNING: possible circular locking dependency detected [ 198.928954][ T842] syzkaller #0 Tainted: G L [ 198.930906][ T842] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.933549][ T842] kworker/3:2/842 is trying to acquire lock: [ 198.935878][ T842] ffff88801ce9fa10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x183/0xb80 [ 198.939087][ T842] [ 198.939087][ T842] but task is already holding lock: [ 198.941708][ T842] ffff88801ce9f980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 198.945493][ T842] [ 198.945493][ T842] which lock already depends on the new lock. [ 198.945493][ T842] [ 198.949297][ T842] [ 198.949297][ T842] the existing dependency chain (in reverse order) is: [ 198.952841][ T842] [ 198.952841][ T842] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 198.956006][ T842] down_write+0x8b/0x1f0 [ 198.957916][ T842] kernfs_add_one+0x38/0x850 [ 198.959973][ T842] kernfs_create_dir_ns+0xfc/0x1a0 [ 198.962295][ T842] internal_create_group+0x36f/0xf40 [ 198.964752][ T842] cpuhp_invoke_callback+0x3ab/0x9a0 [ 198.967068][ T842] cpuhp_issue_call+0x1b8/0x970 [ 198.969201][ T842] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 198.971825][ T842] __cpuhp_setup_state+0xf4/0x300 [ 198.974016][ T842] do_one_initcall+0x121/0x750 [ 198.976110][ T842] kernel_init_freeable+0x6ea/0x7b0 [ 198.978376][ T842] kernel_init+0x1f/0x1e0 [ 198.980342][ T842] ret_from_fork+0x72b/0xd50 [ 198.982362][ T842] ret_from_fork_asm+0x1a/0x30 [ 198.984460][ T842] [ 198.984460][ T842] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 198.987507][ T842] [ 198.987507][ T842] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 198.990610][ T842] cpus_read_lock+0x42/0x170 [ 198.992659][ T842] static_key_disable+0x12/0x20 [ 198.994830][ T842] __inet_hash_connect+0x143e/0x2000 [ 198.997147][ T842] tcp_v4_connect+0xeb3/0x1b40 [ 198.999251][ T842] __inet_stream_connect+0x208/0xfa0 [ 199.001597][ T842] inet_stream_connect+0x57/0xa0 [ 199.003785][ T842] __sys_connect_file+0x141/0x1a0 [ 199.005972][ T842] __sys_connect+0x141/0x170 [ 199.008010][ T842] __ia32_compat_sys_socketcall+0x45e/0x770 [ 199.010576][ T842] __do_fast_syscall_32+0xe7/0x950 [ 199.012785][ T842] do_fast_syscall_32+0x32/0x70 [ 199.014897][ T842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.017568][ T842] [ 199.017568][ T842] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 199.020588][ T842] lock_sock_nested+0x41/0xf0 [ 199.022647][ T842] inet_shutdown+0x67/0x410 [ 199.024703][ T842] nbd_mark_nsock_dead+0xae/0x5c0 [ 199.026913][ T842] recv_work+0x5fb/0x8c0 [ 199.028834][ T842] process_one_work+0xa0e/0x1980 [ 199.030999][ T842] worker_thread+0x5ef/0xe50 [ 199.032976][ T842] kthread+0x370/0x450 [ 199.034808][ T842] ret_from_fork+0x72b/0xd50 [ 199.036858][ T842] ret_from_fork_asm+0x1a/0x30 [ 199.038962][ T842] [ 199.038962][ T842] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 199.041972][ T842] __mutex_lock+0x1a4/0x1b10 [ 199.044036][ T842] nbd_queue_rq+0x428/0x1080 [ 199.046058][ T842] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 199.048485][ T842] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 199.050656][ T842] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 199.052716][ T842] blk_mq_run_hw_queue+0x23c/0x670 [ 199.054522][ T842] blk_mq_dispatch_list+0x51d/0x1360 [ 199.056368][ T842] blk_mq_flush_plug_list+0x130/0x600 [ 199.058243][ T842] __blk_flush_plug+0x2c4/0x4b0 [ 199.059963][ T842] __submit_bio+0x584/0x6c0 [ 199.061579][ T842] submit_bio_noacct_nocheck+0x543/0xbf0 [ 199.063523][ T842] submit_bio_noacct+0xd18/0x2000 [ 199.065281][ T842] submit_bh_wbc+0x681/0x890 [ 199.066919][ T842] block_read_full_folio+0x4c8/0x8e0 [ 199.068819][ T842] filemap_read_folio+0xfc/0x3b0 [ 199.070576][ T842] do_read_cache_folio+0x2d7/0x6b0 [ 199.072356][ T842] read_part_sector+0xd1/0x370 [ 199.074033][ T842] adfspart_check_ICS+0x91/0x7d0 [ 199.075773][ T842] bdev_disk_changed+0x7a3/0x1250 [ 199.077529][ T842] blkdev_get_whole+0x187/0x290 [ 199.079259][ T842] bdev_open+0x2c7/0xe40 [ 199.080809][ T842] blkdev_open+0x34e/0x4f0 [ 199.082370][ T842] do_dentry_open+0x6d8/0x1660 [ 199.084066][ T842] vfs_open+0x82/0x3f0 [ 199.085543][ T842] path_openat+0x208c/0x31a0 [ 199.087170][ T842] do_file_open+0x20e/0x430 [ 199.088796][ T842] do_sys_openat2+0x10d/0x1e0 [ 199.090459][ T842] __x64_sys_openat+0x12d/0x210 [ 199.092173][ T842] do_syscall_64+0x10b/0xf80 [ 199.093750][ T842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.095767][ T842] [ 199.095767][ T842] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 199.097999][ T842] __mutex_lock+0x1a4/0x1b10 [ 199.099573][ T842] nbd_queue_rq+0xba/0x1080 [ 199.101182][ T842] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 199.103111][ T842] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 199.105265][ T842] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 199.107311][ T842] blk_mq_run_hw_queue+0x23c/0x670 [ 199.109112][ T842] blk_mq_dispatch_list+0x51d/0x1360 [ 199.110906][ T842] blk_mq_flush_plug_list+0x130/0x600 [ 199.112764][ T842] __blk_flush_plug+0x2c4/0x4b0 [ 199.114455][ T842] __submit_bio+0x584/0x6c0 [ 199.116051][ T842] submit_bio_noacct_nocheck+0x543/0xbf0 [ 199.117988][ T842] submit_bio_noacct+0xd18/0x2000 [ 199.119732][ T842] submit_bh_wbc+0x681/0x890 [ 199.121381][ T842] block_read_full_folio+0x4c8/0x8e0 [ 199.123215][ T842] filemap_read_folio+0xfc/0x3b0 [ 199.124947][ T842] do_read_cache_folio+0x2d7/0x6b0 [ 199.126709][ T842] read_part_sector+0xd1/0x370 [ 199.128375][ T842] adfspart_check_ICS+0x91/0x7d0 [ 199.130096][ T842] bdev_disk_changed+0x7a3/0x1250 [ 199.131868][ T842] blkdev_get_whole+0x187/0x290 [ 199.133572][ T842] bdev_open+0x2c7/0xe40 [ 199.135115][ T842] blkdev_open+0x34e/0x4f0 [ 199.136710][ T842] do_dentry_open+0x6d8/0x1660 [ 199.138400][ T842] vfs_open+0x82/0x3f0 [ 199.139911][ T842] path_openat+0x208c/0x31a0 [ 199.141557][ T842] do_file_open+0x20e/0x430 [ 199.143157][ T842] do_sys_openat2+0x10d/0x1e0 [ 199.144826][ T842] __x64_sys_openat+0x12d/0x210 [ 199.146528][ T842] do_syscall_64+0x10b/0xf80 [ 199.148164][ T842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.150216][ T842] [ 199.150216][ T842] -> #4 (set->srcu){.+.+}-{0:0}: [ 199.152435][ T842] __synchronize_srcu+0xa2/0x300 [ 199.154156][ T842] blk_mq_quiesce_queue+0x149/0x1c0 [ 199.155982][ T842] elevator_switch+0x17b/0x7e0 [ 199.157654][ T842] elevator_change+0x352/0x530 [ 199.159330][ T842] elevator_set_default+0x29e/0x360 [ 199.161163][ T842] blk_register_queue+0x48e/0x630 [ 199.162911][ T842] __add_disk+0x73f/0xe40 [ 199.164501][ T842] add_disk_fwnode+0x118/0x5c0 [ 199.166179][ T842] nbd_dev_add+0x77a/0xb10 [ 199.167768][ T842] nbd_init+0x291/0x2b0 [ 199.169281][ T842] do_one_initcall+0x121/0x750 [ 199.170941][ T842] kernel_init_freeable+0x6ea/0x7b0 [ 199.172759][ T842] kernel_init+0x1f/0x1e0 [ 199.174314][ T842] ret_from_fork+0x72b/0xd50 [ 199.175797][ T842] ret_from_fork_asm+0x1a/0x30 [ 199.177475][ T842] [ 199.177475][ T842] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 199.179929][ T842] __mutex_lock+0x1a4/0x1b10 [ 199.181587][ T842] elevator_change+0x1bc/0x530 [ 199.183274][ T842] elevator_set_none+0x92/0xf0 [ 199.184966][ T842] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 199.186959][ T842] nbd_start_device+0x1a6/0xbd0 [ 199.188688][ T842] nbd_genl_connect+0xff2/0x1a40 [ 199.190466][ T842] genl_family_rcv_msg_doit+0x214/0x300 [ 199.192405][ T842] genl_rcv_msg+0x560/0x800 [ 199.194014][ T842] netlink_rcv_skb+0x159/0x420 [ 199.195757][ T842] genl_rcv+0x28/0x40 [ 199.197246][ T842] netlink_unicast+0x585/0x850 [ 199.198924][ T842] netlink_sendmsg+0x8b0/0xda0 [ 199.200634][ T842] ____sys_sendmsg+0x9e1/0xb70 [ 199.202311][ T842] ___sys_sendmsg+0x190/0x1e0 [ 199.203971][ T842] __sys_sendmsg+0x170/0x220 [ 199.205592][ T842] __do_fast_syscall_32+0xe7/0x950 [ 199.207371][ T842] do_fast_syscall_32+0x32/0x70 [ 199.209102][ T842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.211269][ T842] [ 199.211269][ T842] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 199.213971][ T842] blk_alloc_queue+0x610/0x790 [ 199.215641][ T842] blk_mq_alloc_queue+0x174/0x290 [ 199.217391][ T842] __blk_mq_alloc_disk+0x29/0x120 [ 199.219142][ T842] nbd_dev_add+0x492/0xb10 [ 199.220751][ T842] nbd_init+0x291/0x2b0 [ 199.222251][ T842] do_one_initcall+0x121/0x750 [ 199.223931][ T842] kernel_init_freeable+0x6ea/0x7b0 [ 199.225729][ T842] kernel_init+0x1f/0x1e0 [ 199.227278][ T842] ret_from_fork+0x72b/0xd50 [ 199.228919][ T842] ret_from_fork_asm+0x1a/0x30 [ 199.230599][ T842] [ 199.230599][ T842] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 199.232890][ T842] fs_reclaim_acquire+0xc4/0x100 [ 199.234610][ T842] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 199.236490][ T842] __kernfs_iattrs+0x124/0x3e0 [ 199.238164][ T842] __kernfs_setattr+0x4d/0x3c0 [ 199.239844][ T842] kernfs_iop_setattr+0xda/0x130 [ 199.241585][ T842] notify_change+0xb25/0x1330 [ 199.243236][ T842] do_truncate+0x1df/0x240 [ 199.244826][ T842] path_openat+0x2a55/0x31a0 [ 199.246453][ T842] do_file_open+0x20e/0x430 [ 199.248110][ T842] do_sys_openat2+0x10d/0x1e0 [ 199.250238][ T842] __x64_sys_openat+0x12d/0x210 [ 199.252377][ T842] do_syscall_64+0x10b/0xf80 [ 199.254408][ T842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.256995][ T842] [ 199.256995][ T842] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 199.260350][ T842] __lock_acquire+0x14b8/0x2630 [ 199.262474][ T842] lock_acquire+0x1b1/0x370 [ 199.264498][ T842] down_write+0x8b/0x1f0 [ 199.266406][ T842] __kernfs_remove+0x183/0xb80 [ 199.268522][ T842] kernfs_remove_by_name_ns+0x7c/0x120 [ 199.270909][ T842] really_probe+0x4d8/0xa60 [ 199.272918][ T842] __driver_probe_device+0x22e/0x480 [ 199.275245][ T842] driver_probe_device+0x4c/0x1b0 [ 199.277446][ T842] __device_attach_driver+0x1df/0x340 [ 199.279800][ T842] bus_for_each_drv+0x159/0x1e0 [ 199.281928][ T842] __device_attach+0x1e4/0x4d0 [ 199.284037][ T842] device_initial_probe+0xaf/0xd0 [ 199.286226][ T842] bus_probe_device+0x64/0x160 [ 199.288333][ T842] device_add+0x1210/0x1950 [ 199.290343][ T842] hid_add_device+0x2bf/0x440 [ 199.292438][ T842] uhid_device_add_worker+0x3a/0x70 [ 199.294695][ T842] process_one_work+0xa0e/0x1980 [ 199.296881][ T842] worker_thread+0x5ef/0xe50 [ 199.298914][ T842] kthread+0x370/0x450 [ 199.300783][ T842] ret_from_fork+0x72b/0xd50 [ 199.302815][ T842] ret_from_fork_asm+0x1a/0x30 [ 199.304923][ T842] [ 199.304923][ T842] other info that might help us debug this: [ 199.304923][ T842] [ 199.308925][ T842] Chain exists of: [ 199.308925][ T842] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 199.308925][ T842] [ 199.314518][ T842] Possible unsafe locking scenario: [ 199.314518][ T842] [ 199.317456][ T842] CPU0 CPU1 [ 199.319568][ T842] ---- ---- [ 199.321713][ T842] lock(&root->kernfs_rwsem); [ 199.323613][ T842] lock(cpuhp_state_mutex); [ 199.326384][ T842] lock(&root->kernfs_rwsem); [ 199.329291][ T842] lock(&root->kernfs_iattr_rwsem); [ 199.331416][ T842] [ 199.331416][ T842] *** DEADLOCK *** [ 199.331416][ T842] [ 199.334618][ T842] 5 locks held by kworker/3:2/842: [ 199.336649][ T842] #0: ffff88801b8aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 199.340745][ T842] #1: ffffc90004917d08 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 199.345151][ T842] #2: ffff888057ce1a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 199.348780][ T842] #3: ffff88801ce9faa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 199.353181][ T842] #4: ffff88801ce9f980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 199.356890][ T842] [ 199.356890][ T842] stack backtrace: [ 199.358774][ T842] CPU: 3 UID: 0 PID: 842 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.358789][ T842] Tainted: [L]=SOFTLOCKUP [ 199.358793][ T842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.358800][ T842] Workqueue: events uhid_device_add_worker [ 199.358813][ T842] Call Trace: [ 199.358817][ T842] [ 199.358822][ T842] dump_stack_lvl+0x100/0x190 [ 199.358834][ T842] print_circular_bug.cold+0x178/0x1c7 [ 199.358851][ T842] check_noncircular+0x146/0x160 [ 199.358869][ T842] __lock_acquire+0x14b8/0x2630 [ 199.358879][ T842] ? __lock_acquire+0x4a5/0x2630 [ 199.358889][ T842] lock_acquire+0x1b1/0x370 [ 199.358898][ T842] ? __kernfs_remove+0x183/0xb80 [ 199.358910][ T842] ? __pfx___might_resched+0x10/0x10 [ 199.358922][ T842] down_write+0x8b/0x1f0 [ 199.358936][ T842] ? __kernfs_remove+0x183/0xb80 [ 199.358947][ T842] ? __pfx_down_write+0x10/0x10 [ 199.358961][ T842] __kernfs_remove+0x183/0xb80 [ 199.358972][ T842] ? kernfs_find_ns+0x33e/0x600 [ 199.358984][ T842] kernfs_remove_by_name_ns+0x7c/0x120 [ 199.358998][ T842] really_probe+0x4d8/0xa60 [ 199.359008][ T842] __driver_probe_device+0x22e/0x480 [ 199.359019][ T842] driver_probe_device+0x4c/0x1b0 [ 199.359029][ T842] __device_attach_driver+0x1df/0x340 [ 199.359040][ T842] ? __pfx___device_attach_driver+0x10/0x10 [ 199.359050][ T842] bus_for_each_drv+0x159/0x1e0 [ 199.359065][ T842] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.359079][ T842] ? lockdep_hardirqs_on+0x78/0x100 [ 199.359091][ T842] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.359102][ T842] __device_attach+0x1e4/0x4d0 [ 199.359112][ T842] ? __pfx___device_attach+0x10/0x10 [ 199.359122][ T842] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.359135][ T842] device_initial_probe+0xaf/0xd0 [ 199.359145][ T842] bus_probe_device+0x64/0x160 [ 199.359161][ T842] device_add+0x1210/0x1950 [ 199.359173][ T842] ? __pfx_device_add+0x10/0x10 [ 199.359185][ T842] ? debugfs_create_file_full+0x41/0x60 [ 199.359202][ T842] hid_add_device+0x2bf/0x440 [ 199.359213][ T842] uhid_device_add_worker+0x3a/0x70 [ 199.359223][ T842] process_one_work+0xa0e/0x1980 [ 199.359235][ T842] ? __pfx_process_one_work+0x10/0x10 [ 199.359247][ T842] ? __pfx_uhid_device_add_worker+0x10/0x10 [ 199.359257][ T842] worker_thread+0x5ef/0xe50 [ 199.359269][ T842] ? __pfx_worker_thread+0x10/0x10 [ 199.359279][ T842] ? kthread+0x13a/0x450 [ 199.359287][ T842] ? __pfx_worker_thread+0x10/0x10 [ 199.359296][ T842] kthread+0x370/0x450 [ 199.359304][ T842] ? __pfx_kthread+0x10/0x10 [ 199.359312][ T842] ret_from_fork+0x72b/0xd50 [ 199.359324][ T842] ? __pfx_ret_from_fork+0x10/0x10 [ 199.359334][ T842] ? __switch_to+0x800/0x1100 [ 199.359348][ T842] ? __pfx_kthread+0x10/0x10 [ 199.359357][ T842] ret_from_fork_asm+0x1a/0x30 [ 199.359373][ T842] [ 199.984893][ T101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.052965][ T101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.103565][ T101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.163503][ T101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.233073][ T101] bridge_slave_1: left allmulticast mode [ 200.234767][ T101] bridge_slave_1: left promiscuous mode [ 200.236502][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.239598][ T101] bridge_slave_0: left allmulticast mode [ 200.242343][ T101] bridge_slave_0: left promiscuous mode [ 200.244889][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.383680][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.388849][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.393641][ T101] bond0 (unregistering): Released all slaves [ 200.398474][ T101] bond1 (unregistering): Released all slaves [ 200.405375][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 200.507473][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.600818][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 200.703701][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 200.722347][ T101] hsr_slave_0: left promiscuous mode [ 200.725205][ T101] hsr_slave_1: left promiscuous mode [ 200.727876][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.731286][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.734694][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.737121][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.741213][ T101] veth1_macvtap: left promiscuous mode [ 200.742995][ T101] veth0_macvtap: left promiscuous mode [ 200.744763][ T101] veth1_vlan: left promiscuous mode [ 200.746425][ T101] veth0_vlan: left promiscuous mode [ 200.795382][ T101] team0 (unregistering): Port device team_slave_1 removed [ 200.799572][ T101] team0 (unregistering): Port device team_slave_0 removed [ 201.193918][ T101] IPVS: stop unused estimator thread 0...