last executing test programs: 21m14.858418703s ago: executing program 1 (id=2): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x40008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x25817000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r6, &(0x7f0000000140), 0x8) socket$inet6(0xa, 0x1, 0x0) 21m12.304368837s ago: executing program 1 (id=18): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) semget$private(0x0, 0x207, 0x480) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r6 = dup(0xffffffffffffffff) ioctl$TCSETAF(r6, 0x5408, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @p_u16=0x0}}) 21m7.818020057s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, 0x0, 0x2042, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = userfaultfd(0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000040)={0xa, @capture={0x0, 0x0, {0x7, 0x4}}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 20m51.604076855s ago: executing program 32 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, 0x0, 0x2042, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = userfaultfd(0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000040)={0xa, @capture={0x0, 0x0, {0x7, 0x4}}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 19m7.105618515s ago: executing program 4 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) faccessat2(r4, &(0x7f0000000180)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r7, 0x7002) 19m3.686876634s ago: executing program 4 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r3 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xf0ff1f) r5 = socket(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x44080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f00000005c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b00279706"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 19m1.614107212s ago: executing program 4 (id=171): close(0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32=r6, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x4004808) unshare(0x40020100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000100000000110000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000080059d22fe6a91f6a27f45aa26ea333004b5f0c2b57603a83c004e763cd00b78d736e874367708404e96825634d6b21e620ecae68f1367e80c68d99589", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r7, 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000000061119c0000000000180000000000000000000000006ee627afecee809a00"], 0x0}, 0x94) 18m56.904964338s ago: executing program 4 (id=173): socket$can_j1939(0x1d, 0x2, 0x7) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000b00)) fcntl$notify(r2, 0x402, 0x8000003d) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 18m55.660600423s ago: executing program 4 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="041c0500c9000600977891343fa2259becdbea4322268822b90b54c04c935bdf7c1c0dce1676fbe5b244061a7abd55bfcf2fac7e061ee57a01915fe0eac444820b11613f04370a11e80dc66089fc2a0a1f659f49d8195c3d7212dbb267adf49c8c99064b4be8f45825d386a4cea952a00f9902281b3e030000409a1e"], 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x40010062) close(r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x240198c0}, 0xc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="31030000000000000000090000000800", @ANYRES64=r1, @ANYBLOB="08000600", @ANYRES8=r0], 0x24}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) syz_emit_ethernet(0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0081000000863b"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fadvise64(r6, 0x3, 0x5, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 18m52.880680844s ago: executing program 4 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x5) setresgid(0xee00, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x404c841) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x4}, &(0x7f0000000180)={0x68, 0x2, 0x7, 0x0, 0xd, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x1b01}}, './file0\x00'}) 18m37.596853008s ago: executing program 33 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x5) setresgid(0xee00, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x404c841) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x4}, &(0x7f0000000180)={0x68, 0x2, 0x7, 0x0, 0xd, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x1b01}}, './file0\x00'}) 9m31.336297569s ago: executing program 0 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x2c, @remote, 0x4e20, 0x0, 'none\x00', 0x32, 0x5, 0x3f}, 0x2c) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{}], 'D'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x44, 0x2, 0x1}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', 0x400}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r8, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x14, r10, 0x301, 0x0, 0x0, {0x17}}, 0x14}}, 0x44094) 9m30.00033165s ago: executing program 0 (id=1767): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}}, 0x0) 9m29.728205705s ago: executing program 0 (id=1768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) faccessat2(r4, &(0x7f0000000180)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r7, 0x7002) 9m28.364629882s ago: executing program 0 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m27.808006084s ago: executing program 0 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 9m27.364283479s ago: executing program 0 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) 9m26.451514806s ago: executing program 34 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) 7m42.517219499s ago: executing program 2 (id=2121): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x6f9a, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m36.335250549s ago: executing program 2 (id=2135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 7m32.774533054s ago: executing program 2 (id=2146): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(r0, 0x0, 0x0, 0xce2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) 7m31.5764896s ago: executing program 2 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m31.325591245s ago: executing program 2 (id=2150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @void, @val, @val={0x3, 0x1, 0xb5}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x82, 0xb}}, @val={0x76, 0x6, {0x4, 0x7, 0x7, 0x7}}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x24000080) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000220000000080000000000000dfff57fb61927ea373af193abcc1394b2b296b4290baab60206ac31c66116884bb76fa5db78e710043e40776bfee5aa9b8cc83f301f57ad9d9d4221457dfaa6d4dc043a2618314dc17773522a612b57db0dabd9da5f8d799d949158e9eefbd968fbccdee0d0c2c9ff2f536cb3064c89945512b1c56125f0bf17ade87670d1286531a201f3c24db42a58f3aa5cec35e85c1011ecd34cf6fc99fbfd852319c14091d74f6fa2b17327da14fa022da84eef16c9abb69f1a4800977fb8e22c4c111c3e24d36", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x1b01}}, './file0\x00'}) ioctl$TIOCGISO7816(r8, 0x80285442, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 7m30.836499444s ago: executing program 2 (id=2153): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="150000"], 0x15) dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000100)=[{r0, 0x2030}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m29.929988696s ago: executing program 35 (id=2153): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="150000"], 0x15) dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000100)=[{r0, 0x2030}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m57.031879758s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 5m12.271379613s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 4m58.956828548s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 4m20.616608058s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3m20.187225459s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 2m34.456987275s ago: executing program 8 (id=2670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd9) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m32.890327672s ago: executing program 8 (id=2672): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b78", 0x22, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m31.595995307s ago: executing program 8 (id=2676): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) r3 = socket$inet(0x2, 0x80000, 0x9) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m29.902526361s ago: executing program 8 (id=2678): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xda4, 0x29, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.396516141s ago: executing program 8 (id=2685): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffe, 0x81, 0x6, 0x8, 0xa2f3}}, &(0x7f00000003c0)=0xb0) 2m25.513981856s ago: executing program 8 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, &(0x7f0000001300)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) syz_emit_vhci(0x0, 0x0) sync() 2m24.362317054s ago: executing program 5 (id=1963): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 2m9.958824458s ago: executing program 36 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, &(0x7f0000001300)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) syz_emit_vhci(0x0, 0x0) sync() 18.399091501s ago: executing program 6 (id=2874): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 16.074834681s ago: executing program 9 (id=2876): socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc2440, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x20000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 15.755725897s ago: executing program 3 (id=2877): syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3, 0x2, 0xffff, 0x101, 0x300}}) 13.983464945s ago: executing program 3 (id=2878): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 13.580000891s ago: executing program 9 (id=2880): open_tree(0xffffffffffffff9c, 0x0, 0x89901) creat(0x0, 0xecf86c37d53049cc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.232238861s ago: executing program 3 (id=2881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000040000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @void, @val, @val={0x3, 0x1, 0xb5}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x82, 0xb}}, @val={0x76, 0x6, {0x4, 0x7, 0x7, 0x7}}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x24000080) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000220000000080000000000000dfff57fb61927ea373af193abcc1394b2b296b4290baab60206ac31c66116884bb76fa5db78e710043e40776bfee5aa9b8cc83f301f57ad9d9d4221457dfaa6d4dc043a2618314dc17773522a612b57db0dabd9da5f8d799d949158e9eefbd968fbccdee0d0c2c9ff2f536cb3064c89945512b1c56125f0bf17ade87670d1286531a201f3c24db42a58f3aa5cec35e85c1011ecd34cf6fc99fbfd852319c14091d74f6fa2b17327da14fa022da84eef16c9abb69f1a4800977fb8e22c4c111c3e24d36", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x1b01}}, './file0\x00'}) ioctl$TIOCGISO7816(r8, 0x80285442, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 11.344049661s ago: executing program 7 (id=2882): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x80, r3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000200)={0x36, 0x20, 0x13, 0xc, 0x5, 0x63, 0x4, 0xcc, 0x1}) 11.305077513s ago: executing program 6 (id=2883): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc80002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x124, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 9.984106871s ago: executing program 7 (id=2884): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, 0x0}, 0xd2) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000003000"], 0xe8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x2, 0x5}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'pimreg\x00', 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) 9.230977205s ago: executing program 6 (id=2885): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) listen(r0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) clock_adjtime(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x51, 0x39, 0x34, 0x34, 0x2d6c01a8f29871d0, 0x33, 0x30, 0x36, 0x37, 0x36, 0x32, 0x0, 0x37, 0x39, 0x36, 0x64]}, &(0x7f0000000340)={0x0, "0ed5f854e8e86a2254c1c824bd65b98d2bcb1b186b4e6d3dfcd10bdb2df476b02701a0ebcf4a4a3a80c38b2f7e544a3df04200a655d407becb3ed31c4eb5b33c", 0x1a}, 0x48, 0xfffffffffffffffc) 8.070642352s ago: executing program 7 (id=2886): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.043708134s ago: executing program 6 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.9598943s ago: executing program 9 (id=2888): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004804) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x20004004) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 7.846045646s ago: executing program 3 (id=2889): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x58dc, 0x80, 0x40000100}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000500)="c97c3a905bdab3c12d5e5bb09363069e18db0a083ff2a8eff6bb4eb4301c7345c952b452772599895b87dbbdab00e5eadcdf07b3ab7d5969dae540f496b25c958aa391594aad29ea83d958775d7b8436654bed0f51103e7fe5df4c214a1d26238161abf8ac94ad675df24880728156bb0fd24eaa677eae46e70777c5804b158abf0a9a52d8c063d81d3c3170c74ef9e48c6ffa62507ad3429bf54532ec478ee3aa30c7813b1d7b0484416b6dcd31670b9811cfa31c79", 0xb6, 0xfffffffffffffffd) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) close(0x3) 6.16422783s ago: executing program 7 (id=2890): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@default, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 5.249305s ago: executing program 6 (id=2891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='minix\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x20800, 0x182) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$evdev(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 5.148306424s ago: executing program 7 (id=2892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020033797a3200000000080041007278650014003300766c616e3100000063000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) 5.08409944s ago: executing program 9 (id=2893): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r5, &(0x7f0000000240)=""/28, 0xffd2) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)}, 0x40000100) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r3}, 0x50) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r6}, 0x18) 4.783825356s ago: executing program 3 (id=2894): socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf7}, 0x8) 2.421452208s ago: executing program 9 (id=2895): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) r5 = socket$kcm(0x10, 0x2, 0x10) close_range(r0, r5, 0x0) keyctl$link(0x8, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f00000000c0)=ANY=[], 0x0) 2.103771121s ago: executing program 3 (id=2896): mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x9, {0xe, 0x9, 0x1, 0x2}}) openat$userio(0xffffffffffffff9c, 0x0, 0x690282, 0x0) clock_getres(0xfffffffffffffff1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020021487b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpgid(0xffffffffffffffff) setpgid(r3, r4) 2.09401264s ago: executing program 6 (id=2897): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000009c0), 0x0, 0x20008050) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x1, 0x3f, 0x9, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) getdents64(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x4, 0x0, &(0x7f0000000000), 0x0) 1.133504644s ago: executing program 7 (id=2898): r0 = socket(0x1e, 0x4, 0x0) eventfd2(0xfffffff7, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ustat(0x10, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FICLONE(r6, 0x40049409, r6) 0s ago: executing program 9 (id=2899): open_tree(0xffffffffffffff9c, 0x0, 0x89901) creat(0x0, 0xecf86c37d53049cc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1 - 0 [ 977.503949][T13735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.514601][T13735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.525616][T13735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.905699][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.929452][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.046652][ T5850] Bluetooth: hci1: ISO packet too small [ 980.398396][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.415338][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.423520][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.432595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.057078][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.066034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.504062][T14009] netlink: 'syz.7.2234': attribute type 3 has an invalid length. [ 981.684761][ T9661] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.709312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.825340][ T9661] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.931130][ T9661] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.005184][ T9661] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.158315][ T9661] bridge_slave_1: left allmulticast mode [ 982.164472][ T9661] bridge_slave_1: left promiscuous mode [ 982.170697][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.181420][ T9661] bridge_slave_0: left allmulticast mode [ 982.189085][ T9661] bridge_slave_0: left promiscuous mode [ 982.195006][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.233840][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2242'. [ 985.117557][T12146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 985.130440][T12146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 985.141187][T12146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 985.166898][T12146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 985.174896][T12146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.174962][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.184190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.655624][ T9661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.687538][ T9661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.703612][ T9661] bond0 (unregistering): Released all slaves [ 986.828065][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.838004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.208306][T12146] Bluetooth: hci0: command tx timeout [ 987.361827][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 420 seconds [ 987.372866][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 420 seconds [ 987.384071][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 420 seconds [ 987.395196][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 420 seconds [ 987.439361][T14044] lo speed is unknown, defaulting to 1000 [ 988.055618][T14044] chnl_net:caif_netlink_parms(): no params data found [ 989.291637][T12146] Bluetooth: hci0: command tx timeout [ 989.774513][ T9661] hsr_slave_0: left promiscuous mode [ 989.893090][ T9661] hsr_slave_1: left promiscuous mode [ 989.921691][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.962155][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.992694][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.032242][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.185201][ T9661] veth1_macvtap: left promiscuous mode [ 990.190973][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 990.242181][ T9661] veth0_macvtap: left promiscuous mode [ 990.256681][ T9661] veth1_vlan: left promiscuous mode [ 990.278175][ T9661] veth0_vlan: left promiscuous mode [ 990.295617][T14088] netlink: 'syz.7.2257': attribute type 1 has an invalid length. [ 990.471911][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 991.293763][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.310270][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 991.321574][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.338055][ T10] usb 9-1: Product: syz [ 991.342403][ T10] usb 9-1: Manufacturer: syz [ 991.358071][ T10] usb 9-1: SerialNumber: syz [ 991.372977][ T10] usb 9-1: config 0 descriptor?? [ 991.376250][T12146] Bluetooth: hci0: command tx timeout [ 991.391029][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 991.928727][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.938619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.217616][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.224579][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.242718][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.252643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.402128][T14101] trusted_key: encrypted_key: insufficient parameters specified [ 993.514353][T12146] Bluetooth: hci0: command tx timeout [ 993.591027][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2260'. [ 994.149611][ T10] gspca_sonixj: reg_w1 err -71 [ 994.226675][ T10] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 994.247423][ T10] usb 9-1: USB disconnect, device number 2 [ 995.363376][ T9661] team0 (unregistering): Port device team_slave_1 removed [ 995.514738][ T9661] team0 (unregistering): Port device team_slave_0 removed [ 996.240487][T12656] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 996.353062][T14088] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 996.398741][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.416830][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.424787][T14044] bridge_slave_0: entered allmulticast mode [ 996.433181][T14044] bridge_slave_0: entered promiscuous mode [ 996.439347][T12656] usb 9-1: Using ep0 maxpacket: 16 [ 996.447689][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.455482][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.463339][T14044] bridge_slave_1: entered allmulticast mode [ 996.472201][T14044] bridge_slave_1: entered promiscuous mode [ 996.508616][T12656] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 996.520579][T12656] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 996.535425][T12656] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 996.544757][T12656] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.553069][T12656] usb 9-1: Product: syz [ 996.557446][T12656] usb 9-1: Manufacturer: syz [ 996.562078][T12656] usb 9-1: SerialNumber: syz [ 996.570256][T12656] usb 9-1: config 0 descriptor?? [ 996.579218][T12656] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 996.588959][T12656] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 996.761552][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.789986][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.841160][T12656] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 997.862778][T12656] em28xx 9-1:0.0: Config register raw data: 0x56 [ 997.864966][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.879069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.064839][T12656] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 998.175551][T12656] em28xx 9-1:0.0: No AC97 audio processor [ 998.206998][T14044] team0: Port device team_slave_0 added [ 998.262050][T14044] team0: Port device team_slave_1 added [ 998.365145][T14138] binder: BINDER_SET_CONTEXT_MGR already set [ 998.416576][T14138] binder: 14137:14138 ioctl 4018620d 200000000040 returned -16 [ 998.442532][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.513102][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.530036][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.589917][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.596769][T14138] binder: 14137:14138 ioctl c0306201 200000000240 returned -11 [ 998.619637][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.974876][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.984705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.175610][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.214819][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.487105][ T8370] usb 9-1: USB disconnect, device number 3 [ 999.494858][ T8370] em28xx 9-1:0.0: Disconnecting em28xx [ 999.527034][ T8370] em28xx 9-1:0.0: Freeing device [ 999.603565][T14044] hsr_slave_0: entered promiscuous mode [ 999.762187][T14044] hsr_slave_1: entered promiscuous mode [ 999.862031][T14044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.873459][T14044] Cannot create hsr debugfs directory [ 1000.716077][T14149] binder: 14148:14149 ioctl c0306201 0 returned -14 [ 1004.110042][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.120267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.727264][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.736219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.507799][T14191] usb usb1: check_ctrlrecip: process 14191 (syz.8.2288) requesting ep 01 but needs 81 [ 1006.517601][T14191] usb usb1: usbfs: process 14191 (syz.8.2288) did not claim interface 0 before use [ 1007.281258][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.288647][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.450781][T14196] bridge0: entered allmulticast mode [ 1008.223271][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.257772][T14196] bridge_slave_1: left allmulticast mode [ 1008.263532][T14196] bridge_slave_1: left promiscuous mode [ 1008.310431][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.339216][T14196] bridge_slave_0: left allmulticast mode [ 1008.345121][T14196] bridge_slave_0: left promiscuous mode [ 1008.353955][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.882604][T14044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.903352][T14044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1008.921385][T14044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1008.935485][T14044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1010.036227][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.045401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.024468][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.033381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.081926][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.439776][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.532917][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.540212][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.554065][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.561336][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.802238][T14235] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1011.814096][T14235] netlink: 'syz.7.2299': attribute type 16 has an invalid length. [ 1011.822156][T14235] netlink: 'syz.7.2299': attribute type 3 has an invalid length. [ 1011.830082][T14235] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2299'. [ 1012.543014][T14044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1012.586730][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.261250][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.265524][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.274548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.887856][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.897512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.216669][ T5932] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1017.396784][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 1017.429090][ T5932] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1017.456172][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.494887][ T5932] usb 4-1: config 0 has no interface number 0 [ 1017.518709][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1017.528870][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.537545][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 450 seconds [ 1017.548705][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 450 seconds [ 1017.559986][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 450 seconds [ 1017.571409][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 450 seconds [ 1017.588633][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.601964][ T5932] usb 4-1: Product: syz [ 1017.616417][ T5932] usb 4-1: Manufacturer: syz [ 1017.621829][ T5932] usb 4-1: SerialNumber: syz [ 1017.629800][ T5932] usb 4-1: config 0 descriptor?? [ 1017.642764][ T5932] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1017.671993][ T5932] usb 4-1: No valid video chain found. [ 1017.861618][T12656] usb 4-1: USB disconnect, device number 47 [ 1018.371566][T14044] veth0_vlan: entered promiscuous mode [ 1018.457554][T14044] veth1_vlan: entered promiscuous mode [ 1018.617433][T14044] veth0_macvtap: entered promiscuous mode [ 1018.690732][T14044] veth1_macvtap: entered promiscuous mode [ 1018.992512][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.700898][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.731830][T14044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.966859][T14044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.977010][T14044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.986488][T14044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.037601][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.047490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.117894][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.162946][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.204622][T14325] bpq0: entered promiscuous mode [ 1022.209920][T14325] bpq0: entered allmulticast mode [ 1022.418711][T14338] xt_hashlimit: size too large, truncated to 1048576 [ 1022.541236][T14322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.888968][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.898217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.690444][T14322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.839249][T14339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1025.202972][T14361] overlay: Unknown parameter '/dev/cpu/#/msr' [ 1026.862869][ T5970] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.135346][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.773154][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.782225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.801780][ T5970] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.907567][ T5970] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.055319][ T5970] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.732067][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.741443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.142669][ T5970] bridge_slave_1: left allmulticast mode [ 1029.156340][ T5970] bridge_slave_1: left promiscuous mode [ 1029.186402][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.284683][ T5970] bridge_slave_0: left allmulticast mode [ 1029.310293][ T5970] bridge_slave_0: left promiscuous mode [ 1029.316229][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.618540][ T5903] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1029.852220][ T5903] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1029.858982][T14417] overlayfs: failed to clone upperpath [ 1029.887492][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.910866][ T5903] usb 9-1: Product: syz [ 1029.915419][ T5903] usb 9-1: Manufacturer: syz [ 1029.947455][ T5903] usb 9-1: SerialNumber: syz [ 1029.949708][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1029.959058][ T5903] usb 9-1: config 0 descriptor?? [ 1029.968747][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1029.987630][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1029.992347][ T5903] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1030.015167][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1030.025917][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1030.396436][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.411377][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.425713][ T5970] bond0 (unregistering): Released all slaves [ 1030.446082][T14405] netlink: 'syz.3.2337': attribute type 12 has an invalid length. [ 1030.675424][T14418] lo speed is unknown, defaulting to 1000 [ 1031.489763][ T5903] gspca_sonixj: reg_w1 err -71 [ 1031.568686][ T5903] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1031.599137][ T5903] usb 9-1: USB disconnect, device number 4 [ 1031.739730][T12146] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 1031.798084][ T5970] hsr_slave_0: left promiscuous mode [ 1031.810860][ T5970] hsr_slave_1: left promiscuous mode [ 1031.818720][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.826666][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.834976][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.848431][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.908600][ T5970] veth1_macvtap: left promiscuous mode [ 1031.914447][ T5970] veth0_macvtap: left promiscuous mode [ 1032.172293][T12146] Bluetooth: hci0: command tx timeout [ 1032.193517][ T5970] veth1_vlan: left promiscuous mode [ 1032.207667][ T5970] veth0_vlan: left promiscuous mode [ 1033.855288][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.865127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.458718][T12146] Bluetooth: hci0: command tx timeout [ 1034.716891][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.726636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.771355][T12146] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1035.783767][T12146] Bluetooth: hci2: Injecting HCI hardware error event [ 1035.793557][ T5850] Bluetooth: hci2: hardware error 0x00 [ 1036.726800][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.727818][T12146] Bluetooth: hci0: command tx timeout [ 1037.174336][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 1037.237233][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 1037.390944][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 1037.492789][T14480] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1037.509253][T14480] netlink: 'syz.8.2359': attribute type 16 has an invalid length. [ 1037.517781][T14480] netlink: 'syz.8.2359': attribute type 3 has an invalid length. [ 1037.526176][T14480] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2359'. [ 1037.866874][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1038.868486][ T5850] Bluetooth: hci0: command tx timeout [ 1038.980607][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.989736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.615111][T14418] chnl_net:caif_netlink_parms(): no params data found [ 1039.797778][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.817161][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.836619][T14418] bridge_slave_0: entered allmulticast mode [ 1039.853355][T14418] bridge_slave_0: entered promiscuous mode [ 1039.915578][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.924389][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.932826][T14418] bridge_slave_1: entered allmulticast mode [ 1039.942789][T14418] bridge_slave_1: entered promiscuous mode [ 1040.568980][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.577945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.068681][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.119962][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.339284][T14510] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1042.346121][T14510] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1042.376287][T14510] vhci_hcd vhci_hcd.0: Device attached [ 1042.796866][ T5977] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1043.557510][T14511] vhci_hcd: connection closed [ 1043.569544][ T9658] vhci_hcd: stop threads [ 1043.637910][ T9658] vhci_hcd: release socket [ 1043.652629][ T9658] vhci_hcd: disconnect device [ 1043.726800][T14418] team0: Port device team_slave_0 added [ 1044.688848][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.698256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.836710][T14520] wg2: entered promiscuous mode [ 1044.842024][T14520] wg2: entered allmulticast mode [ 1045.065972][T14418] team0: Port device team_slave_1 added [ 1046.131674][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.184907][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.216225][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.327712][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.337606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.374089][T14534] team_slave_1: mtu greater than device maximum [ 1046.383879][T14534] team0: Device team_slave_1 failed to change mtu [ 1046.415596][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.431061][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.466962][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.150964][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.606437][T13163] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 480 seconds [ 1047.617642][T13163] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 480 seconds [ 1047.644865][T13163] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 480 seconds [ 1047.680696][T13163] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 480 seconds [ 1048.716394][ T5977] vhci_hcd: vhci_device speed not set [ 1049.472034][T14418] hsr_slave_0: entered promiscuous mode [ 1049.489296][T14418] hsr_slave_1: entered promiscuous mode [ 1049.498383][T14418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.505985][T14418] Cannot create hsr debugfs directory [ 1049.969927][T14560] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1049.984997][T14560] netlink: 'syz.6.2377': attribute type 16 has an invalid length. [ 1049.993584][T14560] netlink: 'syz.6.2377': attribute type 3 has an invalid length. [ 1050.002217][T14560] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1050.181543][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.191346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.924907][ T30] audit: type=1326 audit(1752194246.360:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14563 comm="syz.6.2378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5cbb8e929 code=0x0 [ 1052.092739][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.101665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.232060][T14418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1053.310021][T14418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1053.433773][T14418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1053.574969][T14418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1054.766833][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.773283][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.542521][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.575068][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.935021][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.944202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.297952][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.322199][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2381'. [ 1056.339422][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.346897][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.459757][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.467262][ T9661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.847361][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.856267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.214432][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.017751][T14615] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1059.024863][T14615] PKCS7: Only support pkcs7_signedData type [ 1060.837102][ T5977] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1060.960786][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2392'. [ 1061.006347][ T5977] usb 7-1: Using ep0 maxpacket: 32 [ 1061.021800][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.045244][T14629] geneve2: entered allmulticast mode [ 1061.059960][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.100932][ T5977] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1061.139135][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.173868][ T5977] usb 7-1: config 0 descriptor?? [ 1061.367861][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.377687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.647472][ T5977] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1061.859321][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 1061.937875][T12656] usb 7-1: USB disconnect, device number 32 [ 1062.719069][T14641] overlayfs: missing 'lowerdir' [ 1063.606565][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.615425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.527608][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.395991][T14418] veth0_vlan: entered promiscuous mode [ 1066.467248][T14418] veth1_vlan: entered promiscuous mode [ 1066.627641][T14418] veth0_macvtap: entered promiscuous mode [ 1066.699655][T14418] veth1_macvtap: entered promiscuous mode [ 1066.742000][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.820940][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.830078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.882813][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.924819][T14418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.934839][T14418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.945314][T14418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.955342][T14418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.177375][T14324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.234571][T14324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.863670][T14324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.873220][T14324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.578591][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.587565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.603308][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2411'. [ 1069.621123][T14700] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2411'. [ 1070.609755][T14705] kvm: pic: non byte write [ 1070.677003][T14709] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 1070.855822][T14712] overlayfs: failed to clone upperpath [ 1071.527791][T14716] xt_NFQUEUE: number of total queues is 0 [ 1071.928555][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.937443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.265894][T14324] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.423154][T14324] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.588863][T14324] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.711528][T14324] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.872067][T14324] bridge_slave_1: left allmulticast mode [ 1073.878140][T14324] bridge_slave_1: left promiscuous mode [ 1073.884321][T14324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.894562][T14324] bridge_slave_0: left allmulticast mode [ 1073.901238][T14324] bridge_slave_0: left promiscuous mode [ 1073.907780][T14324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.367567][T14724] overlayfs: failed to clone upperpath [ 1075.686966][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.481496][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.661942][T12414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.678186][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.796449][T13136] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1077.065090][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.074904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.156550][T13136] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1077.195381][T13136] usb 9-1: not running at top speed; connect to a high speed hub [ 1077.528503][T13136] usb 9-1: config 253 has an invalid interface number: 140 but max is 0 [ 1077.756569][T13136] usb 9-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1077.760144][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.777152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.786307][T13136] usb 9-1: config 253 has no interface number 0 [ 1077.866399][T13136] usb 9-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.010650][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 510 seconds [ 1078.021608][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 510 seconds [ 1078.032771][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 510 seconds [ 1078.046127][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 510 seconds [ 1078.247919][T14324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.271252][T13136] usb 9-1: string descriptor 0 read error: -71 [ 1078.310121][T13136] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1078.342272][T13136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.376458][T13136] usb 9-1: can't set config #253, error -71 [ 1078.409508][T14324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.419803][T13136] usb 9-1: USB disconnect, device number 5 [ 1078.484396][T14324] bond0 (unregistering): Released all slaves [ 1079.614358][T14762] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1079.623388][T14762] netlink: 'syz.8.2425': attribute type 16 has an invalid length. [ 1079.631663][T14762] netlink: 'syz.8.2425': attribute type 3 has an invalid length. [ 1079.639459][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2425'. [ 1082.326370][T12146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1082.486872][T12146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1082.955234][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.965185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.466614][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.475609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.240899][T14324] hsr_slave_0: left promiscuous mode [ 1084.272378][T14324] hsr_slave_1: left promiscuous mode [ 1084.279558][T14324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.294240][T14324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.321428][T14324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.371806][T14324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.476256][T14324] veth1_macvtap: left promiscuous mode [ 1084.486327][T14763] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1084.558871][T14324] veth0_macvtap: left promiscuous mode [ 1084.598107][T14324] veth1_vlan: left promiscuous mode [ 1084.603785][T14324] veth0_vlan: left promiscuous mode [ 1085.210330][T13136] page_pool_release_retry() stalled pool shutdown: id 88, 1 inflight 60 sec [ 1086.009177][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.290042][T14324] team0 (unregistering): Port device team_slave_1 removed [ 1087.442619][T14324] team0 (unregistering): Port device team_slave_0 removed [ 1087.567568][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063111c00: rx timeout, send abort [ 1087.576335][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888063112000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1087.708746][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1087.725674][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1087.734914][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1087.747050][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1087.755232][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1088.075828][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063111c00: abort rx timeout. Force session deactivation [ 1088.176707][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.185641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.848222][ T5850] Bluetooth: hci0: command tx timeout [ 1090.255410][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.304691][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.385597][T14798] hsr0: left promiscuous mode [ 1091.218014][T14798] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.228898][T14798] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.247230][T14798] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.256267][T14798] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.465905][T14798] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.475266][T14798] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.484064][T14798] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.492828][T14798] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.673393][T14805] lo speed is unknown, defaulting to 1000 [ 1091.926825][ T5850] Bluetooth: hci0: command tx timeout [ 1093.543605][T14851] rdma_rxe: rxe_newlink: failed to add lo [ 1094.426200][ T5850] Bluetooth: hci0: command tx timeout [ 1094.437053][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.446833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.096839][T14805] chnl_net:caif_netlink_parms(): no params data found [ 1096.117373][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.493275][ T5850] Bluetooth: hci0: command tx timeout [ 1097.611107][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.620160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.649902][T14805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.673986][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.691640][T14805] bridge_slave_0: entered allmulticast mode [ 1098.708575][T14805] bridge_slave_0: entered promiscuous mode [ 1098.724925][T14805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.733079][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.750586][T14805] bridge_slave_1: entered allmulticast mode [ 1098.762872][T14805] bridge_slave_1: entered promiscuous mode [ 1099.386818][T13136] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1099.431654][T14805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.490400][T14805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.556470][T13136] usb 4-1: Using ep0 maxpacket: 32 [ 1099.601627][T13136] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1099.634653][T13136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.695945][T13136] usb 4-1: config 0 descriptor?? [ 1099.714118][T13136] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1099.741127][T14805] team0: Port device team_slave_0 added [ 1099.754372][T14899] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1099.831415][T14805] team0: Port device team_slave_1 added [ 1100.054525][T14805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.071252][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.222552][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.232785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.677759][T14805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.692687][T14805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.561148][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.588456][T14805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.274049][T14805] hsr_slave_0: entered promiscuous mode [ 1102.300546][T14805] hsr_slave_1: entered promiscuous mode [ 1102.330456][T14805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.392584][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1102.398110][T14805] Cannot create hsr debugfs directory [ 1103.000644][T14919] trusted_key: encrypted_key: insufficient parameters specified [ 1103.432327][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1103.574375][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.583279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.067531][T13136] gspca_vc032x: reg_w err -110 [ 1104.072383][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.099183][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.104557][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.141096][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.172836][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.182967][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.206441][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.246259][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.269582][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.283565][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.319314][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.378954][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1104.411130][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1105.237565][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.273969][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1105.406189][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1105.420306][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1105.425667][T13136] gspca_vc032x: I2c Bus Busy Wait 00 [ 1105.486020][T13136] gspca_vc032x: Unknown sensor... [ 1105.541080][T13136] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1106.047788][T13136] usb 4-1: USB disconnect, device number 48 [ 1106.398842][T13136] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1106.489136][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.499148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.572955][T13136] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1107.127135][T13136] usb 4-1: not running at top speed; connect to a high speed hub [ 1107.156708][T13136] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 1107.176204][T13136] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1108.406471][T13163] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 540 seconds [ 1108.417543][T13163] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 540 seconds [ 1108.460365][T13163] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 540 seconds [ 1108.502857][T13163] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 540 seconds [ 1109.090398][T13136] usb 4-1: config 253 has no interface number 0 [ 1109.096619][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.106382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.722364][T13136] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.757783][T13136] usb 4-1: string descriptor 0 read error: -71 [ 1109.774893][T13136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1109.784742][T13136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.788546][T14805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1109.796831][T13136] usb 4-1: can't set config #253, error -71 [ 1109.807694][T13136] usb 4-1: USB disconnect, device number 49 [ 1109.969729][T14805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1110.131720][T14805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1110.618048][T14805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1111.653488][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.663180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.470287][T14958] tipc: Started in network mode [ 1112.475411][T14958] tipc: Node identity ac1414aa, cluster identity 4711 [ 1112.495719][T14958] tipc: Enabled bearer , priority 10 [ 1112.768070][T14966] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1112.778076][T14966] netlink: 'syz.7.2471': attribute type 16 has an invalid length. [ 1112.786596][T14966] netlink: 'syz.7.2471': attribute type 3 has an invalid length. [ 1112.794851][T14966] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2471'. [ 1113.448324][T14805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.385185][ T5977] tipc: Node number set to 2886997162 [ 1114.570697][T14805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.624348][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.631608][ T9660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.646995][T14981] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1114.653575][T14981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1114.661373][T14981] vhci_hcd vhci_hcd.0: Device attached [ 1114.752980][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.760260][ T9660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.806944][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.808119][T14983] vhci_hcd: connection closed [ 1114.822915][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.836681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.862687][T14805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1114.875141][ T9660] vhci_hcd: stop threads [ 1114.879860][ T9660] vhci_hcd: release socket [ 1114.884767][ T9660] vhci_hcd: disconnect device [ 1114.898432][T14805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.926491][ T5977] vhci_hcd: vhci_device speed not set [ 1115.833619][T14997] delete_channel: no stack [ 1115.894264][T14805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.100585][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.176484][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.426561][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.436485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.350310][T15032] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1119.367082][T15032] netlink: 'syz.6.2486': attribute type 16 has an invalid length. [ 1119.375538][T15032] netlink: 'syz.6.2486': attribute type 3 has an invalid length. [ 1119.384699][T15032] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2486'. [ 1119.898929][T14805] veth0_vlan: entered promiscuous mode [ 1119.927993][T14805] veth1_vlan: entered promiscuous mode [ 1120.009139][T14805] veth0_macvtap: entered promiscuous mode [ 1120.029250][T14805] veth1_macvtap: entered promiscuous mode [ 1120.111431][T14805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.183905][T14805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.223118][T14805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.237986][T14805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.258912][T14805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.285201][T14805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.456841][ T5977] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1120.615085][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.624939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.185519][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.193789][ T5977] usb 7-1: Using ep0 maxpacket: 16 [ 1121.203916][ T5977] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1121.224847][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.242526][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.254836][ T5977] usb 7-1: config 0 descriptor?? [ 1121.496420][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.537588][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.316581][T13136] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1122.678746][T13136] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1122.695047][T13136] usb 4-1: not running at top speed; connect to a high speed hub [ 1122.705889][T13136] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 1122.722872][T13136] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1122.734072][T13136] usb 4-1: config 253 has no interface number 0 [ 1122.746653][T13136] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1122.772812][T13136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1122.794490][T13136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.803147][T13136] usb 4-1: Product: syz [ 1122.808005][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.817000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.836005][T13136] usb 4-1: Manufacturer: syz [ 1122.841049][T13136] usb 4-1: SerialNumber: syz [ 1123.060573][ T3565] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.069205][T15050] delete_channel: no stack [ 1123.099979][T13136] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 1123.129856][T13136] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 1123.155885][T13136] usb 4-1: USB disconnect, device number 50 [ 1123.254039][ T3565] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.414945][ T3565] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.574413][ T3565] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.760444][ T3565] bridge_slave_1: left allmulticast mode [ 1123.766772][ T3565] bridge_slave_1: left promiscuous mode [ 1123.772646][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.799397][ T3565] bridge_slave_0: left allmulticast mode [ 1123.805223][ T3565] bridge_slave_0: left promiscuous mode [ 1123.818024][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.833237][ T5977] usbhid 7-1:0.0: can't add hid device: -71 [ 1123.844350][ T5977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1123.868037][ T5977] usb 7-1: USB disconnect, device number 33 [ 1124.369485][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.383038][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.394691][ T3565] bond0 (unregistering): Released all slaves [ 1124.417611][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.088287][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.098044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.284138][T15071] tipc: Enabling of bearer rejected, failed to enable media [ 1127.039945][T12146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1127.060993][ T3565] hsr_slave_0: left promiscuous mode [ 1127.067061][T12146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1127.086288][T12146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1127.106426][T12146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1127.114719][T12146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1127.144629][ T3565] hsr_slave_1: left promiscuous mode [ 1127.152231][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.182376][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.247444][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.398098][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.922311][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.931447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.088545][ T3565] veth1_macvtap: left promiscuous mode [ 1128.094606][ T3565] veth0_macvtap: left promiscuous mode [ 1128.101047][ T3565] veth1_vlan: left promiscuous mode [ 1128.107446][ T3565] veth0_vlan: left promiscuous mode [ 1128.318721][T15095] trusted_key: encrypted_key: insufficient parameters specified [ 1128.384441][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2502'. [ 1129.850292][T12146] Bluetooth: hci0: command tx timeout [ 1131.707920][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.716847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.931535][T12146] Bluetooth: hci0: command tx timeout [ 1132.379056][ T10] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1132.560228][ T5932] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1132.575921][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.599242][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1132.619872][ T10] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 1132.644554][ T10] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1132.656178][ T10] usb 4-1: config 253 has no interface number 0 [ 1132.674907][ T10] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1132.691833][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1132.701149][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.709496][ T10] usb 4-1: Product: syz [ 1132.713924][ T10] usb 4-1: Manufacturer: syz [ 1132.719336][ T10] usb 4-1: SerialNumber: syz [ 1132.728621][ T5932] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 1132.736934][ T5932] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.750159][ T5932] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1132.759763][ T5932] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1132.769758][ T5932] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1132.778097][ T5932] usb 7-1: Product: syz [ 1132.782340][ T5932] usb 7-1: Manufacturer: syz [ 1132.787305][ T5932] usb 7-1: SerialNumber: syz [ 1132.841383][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 1132.917624][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 1132.988801][T15111] delete_channel: no stack [ 1133.028042][ T10] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 1133.038420][ T10] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 1133.051030][ T10] usb 4-1: USB disconnect, device number 51 [ 1133.372794][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.382273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.431051][ T5932] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1133.630350][ T5932] usb 7-1: USB disconnect, device number 34 [ 1133.645105][ T5932] usblp0: removed [ 1134.786649][T12146] Bluetooth: hci0: command tx timeout [ 1134.812204][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.879150][T15087] lo speed is unknown, defaulting to 1000 [ 1135.132256][T15122] tipc: Started in network mode [ 1135.146419][T15122] tipc: Node identity 92c6306c793c, cluster identity 4711 [ 1135.176615][T15122] tipc: Enabled bearer , priority 0 [ 1135.263084][T15127] syzkaller0: entered promiscuous mode [ 1135.273802][T15127] syzkaller0: entered allmulticast mode [ 1135.684320][T15135] tipc: Resetting bearer [ 1136.408975][T15139] trusted_key: encrypted_key: insufficient parameters specified [ 1136.446855][T15121] tipc: Resetting bearer [ 1136.596519][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2513'. [ 1136.617627][T15121] tipc: Disabling bearer [ 1136.830263][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.839450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.850088][T12146] Bluetooth: hci0: command tx timeout [ 1136.861345][T13136] tipc: Node number set to 3959042156 [ 1138.496964][T15087] chnl_net:caif_netlink_parms(): no params data found [ 1138.498623][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 570 seconds [ 1138.531853][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 570 seconds [ 1138.549449][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 570 seconds [ 1138.561546][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 570 seconds [ 1139.592764][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.601753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.656472][T15087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.663708][T15087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.742739][T15087] bridge_slave_0: entered allmulticast mode [ 1140.770273][T15087] bridge_slave_0: entered promiscuous mode [ 1140.785207][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.822897][T15087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.043327][T15087] bridge_slave_1: entered allmulticast mode [ 1141.053034][T15087] bridge_slave_1: entered promiscuous mode [ 1141.929082][T15087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.970208][T15087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.124735][T15087] team0: Port device team_slave_0 added [ 1142.148348][T15087] team0: Port device team_slave_1 added [ 1142.327217][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.336697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.361226][T15087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.392461][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.426948][T15087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.642038][T15087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.650232][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.697802][T15087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.768391][T15087] hsr_slave_0: entered promiscuous mode [ 1143.829443][T15087] hsr_slave_1: entered promiscuous mode [ 1143.840380][T15087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.853142][T15087] Cannot create hsr debugfs directory [ 1144.835720][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.886759][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.896661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.806964][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2533'. [ 1148.277566][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.286461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.479523][T15240] tipc: Enabled bearer , priority 0 [ 1148.498321][T15240] syzkaller0: entered promiscuous mode [ 1148.504801][T15240] syzkaller0: entered allmulticast mode [ 1148.829519][T15247] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1148.839942][T15247] netlink: 'syz.7.2539': attribute type 16 has an invalid length. [ 1148.847962][T15247] netlink: 'syz.7.2539': attribute type 3 has an invalid length. [ 1148.855785][T15247] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2539'. [ 1149.235108][T15240] tipc: Resetting bearer [ 1149.645805][T15238] tipc: Resetting bearer [ 1149.735530][T15238] tipc: Disabling bearer [ 1150.709347][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.719058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.899230][T15087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.057219][T15264] tipc: Enabled bearer , priority 0 [ 1151.064755][T15087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1151.924260][T15087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1151.977186][T15264] syzkaller0: entered promiscuous mode [ 1151.983836][T15264] syzkaller0: entered allmulticast mode [ 1153.023109][T15087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1153.546632][T15266] tipc: Resetting bearer [ 1153.600800][T15263] tipc: Resetting bearer [ 1153.846821][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.856653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.942431][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.003025][T15263] tipc: Disabling bearer [ 1156.459827][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.469928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.305616][T15311] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1157.317783][T15311] netlink: 'syz.3.2551': attribute type 16 has an invalid length. [ 1157.325688][T15311] netlink: 'syz.3.2551': attribute type 3 has an invalid length. [ 1157.333571][T15311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1158.064594][T15087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.443031][T15087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.462860][T15322] tipc: Enabled bearer , priority 0 [ 1158.573362][T15322] syzkaller0: entered promiscuous mode [ 1158.663674][T15322] syzkaller0: entered allmulticast mode [ 1159.187024][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.196729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.360312][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.367550][ T9659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.446547][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.453775][ T9659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.475112][T15322] tipc: Resetting bearer [ 1159.506533][T15321] tipc: Resetting bearer [ 1159.559890][T15321] tipc: Disabling bearer [ 1160.559934][T15337] ptrace attach of "./syz-executor exec"[15338] was attempted by "./syz-executor exec"[15337] [ 1162.268560][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.277903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.355554][T15344] trusted_key: encrypted_key: insufficient parameters specified [ 1162.459884][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2558'. [ 1163.447772][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.751312][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.760341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.214929][T15376] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1167.225426][T15376] netlink: 'syz.6.2564': attribute type 16 has an invalid length. [ 1167.233425][T15376] netlink: 'syz.6.2564': attribute type 3 has an invalid length. [ 1167.241270][T15376] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2564'. [ 1168.332654][T15087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.572577][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 600 seconds [ 1168.584185][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 600 seconds [ 1168.595476][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 600 seconds [ 1168.607278][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 600 seconds [ 1168.622022][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.631062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.681991][T15382] tipc: Enabled bearer , priority 0 [ 1168.788658][T15387] syzkaller0: entered promiscuous mode [ 1168.794614][T15387] syzkaller0: entered allmulticast mode [ 1169.481134][T15382] tipc: Resetting bearer [ 1169.940366][T15380] tipc: Resetting bearer [ 1170.302977][T15380] tipc: Disabling bearer [ 1171.160871][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.170618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.279330][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.369193][T15087] veth0_vlan: entered promiscuous mode [ 1173.840404][T15087] veth1_vlan: entered promiscuous mode [ 1174.124054][T15087] veth0_macvtap: entered promiscuous mode [ 1174.137763][T15087] veth1_macvtap: entered promiscuous mode [ 1174.642674][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.651775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.685064][T15087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.788677][T15087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.861083][T15087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.912343][T15087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.925648][T15087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.937442][T15087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.594838][T15444] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1176.603834][T15444] netlink: 'syz.6.2581': attribute type 16 has an invalid length. [ 1176.611754][T15444] netlink: 'syz.6.2581': attribute type 3 has an invalid length. [ 1176.619642][T15444] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1177.013181][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.022150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.294430][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.333931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.563016][T14322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.621632][T14322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.764954][ T9658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.794902][ T9658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.808828][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.817820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.902841][T15455] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1180.911082][T15455] UDF-fs: Scanning with blocksize 512 failed [ 1180.924248][T15455] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1180.938068][T15455] UDF-fs: Scanning with blocksize 1024 failed [ 1180.948074][T15455] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1180.955640][T15455] UDF-fs: Scanning with blocksize 2048 failed [ 1180.964869][T15455] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1180.973004][T15455] UDF-fs: Scanning with blocksize 4096 failed [ 1182.657356][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.665971][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.675606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.544976][ T9646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.719094][ T9646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.806789][ T9646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.893595][ T9646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.015582][ T9646] bridge_slave_1: left allmulticast mode [ 1184.022219][ T9646] bridge_slave_1: left promiscuous mode [ 1184.028606][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.038744][ T9646] bridge_slave_0: left allmulticast mode [ 1184.044429][ T9646] bridge_slave_0: left promiscuous mode [ 1184.051323][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.512369][ T9646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.524821][ T9646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.540909][ T9646] bond0 (unregistering): Released all slaves [ 1186.496333][T15493] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1187.187512][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.197264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.609921][T15493] netlink: 'syz.3.2594': attribute type 16 has an invalid length. [ 1187.618511][T15493] netlink: 'syz.3.2594': attribute type 3 has an invalid length. [ 1187.626819][T15493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2594'. [ 1188.126123][ T9646] hsr_slave_0: left promiscuous mode [ 1188.154348][ T9646] hsr_slave_1: left promiscuous mode [ 1188.168282][ T9646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.281691][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.299444][ T9646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.320800][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.402153][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1188.416591][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.425539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.435158][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1188.447118][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1188.459375][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1188.468037][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1188.513442][ T9646] veth1_macvtap: left promiscuous mode [ 1188.546657][T15499] misc userio: No port type given on /dev/userio [ 1188.616640][ T9646] veth0_macvtap: left promiscuous mode [ 1188.622930][ T9646] veth1_vlan: left promiscuous mode [ 1188.629993][ T9646] veth0_vlan: left promiscuous mode [ 1190.336795][T12146] Bluetooth: hci1: command 0x0406 tx timeout [ 1190.567828][T12146] Bluetooth: hci0: command tx timeout [ 1192.315305][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.384914][T15518] trusted_key: encrypted_key: insufficient parameters specified [ 1192.451566][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2601'. [ 1192.706395][T12146] Bluetooth: hci0: command tx timeout [ 1193.526692][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.535695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.452988][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2606'. [ 1194.818934][T12146] Bluetooth: hci0: command tx timeout [ 1194.875214][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.884223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.983016][ T9646] team0 (unregistering): Port device team_slave_1 removed [ 1195.288237][ T9646] team0 (unregistering): Port device team_slave_0 removed [ 1197.021741][ T5850] Bluetooth: hci0: command 0x0419 tx timeout [ 1198.663460][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.673165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.786220][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 630 seconds [ 1198.797051][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 630 seconds [ 1198.808102][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 630 seconds [ 1198.819186][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 630 seconds [ 1198.964082][ T5850] Bluetooth: hci1: unexpected event for opcode 0x200d [ 1199.287169][ T5850] Bluetooth: hci0: command 0x0419 tx timeout [ 1199.736621][T15560] vlan0: entered promiscuous mode [ 1199.742138][T15560] dummy0: entered promiscuous mode [ 1199.899926][T15502] lo speed is unknown, defaulting to 1000 [ 1200.404012][T15579] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1200.412897][T15579] netlink: 'syz.8.2616': attribute type 16 has an invalid length. [ 1200.420823][T15579] netlink: 'syz.8.2616': attribute type 3 has an invalid length. [ 1200.428614][T15579] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1200.551383][T15574] veth1_macvtap: left promiscuous mode [ 1200.557971][T15574] macsec0: entered allmulticast mode [ 1200.599822][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.609586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.808210][T15576] veth1_macvtap: entered promiscuous mode [ 1200.814605][T15576] veth1_macvtap: entered allmulticast mode [ 1200.821196][T15576] macsec0: left allmulticast mode [ 1200.826692][T15576] veth1_macvtap: left allmulticast mode [ 1202.053824][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.096567][T14326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.105392][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.114667][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.949724][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.416064][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.425244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.925800][T15502] chnl_net:caif_netlink_parms(): no params data found [ 1204.947293][T15613] trusted_key: encrypted_key: insufficient parameters specified [ 1205.012622][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2625'. [ 1206.346886][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.354097][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.958622][T15502] bridge_slave_0: entered allmulticast mode [ 1206.970939][T15502] bridge_slave_0: entered promiscuous mode [ 1206.984036][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.991625][T15502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.000070][T15502] bridge_slave_1: entered allmulticast mode [ 1207.010515][T15502] bridge_slave_1: entered promiscuous mode [ 1207.571390][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.580443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.621531][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.645352][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.655102][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.743278][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.999728][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.100059][T15642] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1208.113646][T15642] netlink: 'syz.7.2631': attribute type 16 has an invalid length. [ 1208.122093][T15642] netlink: 'syz.7.2631': attribute type 3 has an invalid length. [ 1208.130529][T15642] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2631'. [ 1209.093811][T15502] team0: Port device team_slave_0 added [ 1209.637184][T15502] team0: Port device team_slave_1 added [ 1209.999059][T15648] overlayfs: failed to clone upperpath [ 1211.620898][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.628713][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.803368][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.853800][T15660] 8021q: VLANs not supported on sit0 [ 1211.895725][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.930821][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.961061][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.166881][T15502] hsr_slave_0: entered promiscuous mode [ 1212.173858][T15502] hsr_slave_1: entered promiscuous mode [ 1212.203739][T15502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.470546][T15502] Cannot create hsr debugfs directory [ 1212.875551][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.884897][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.894723][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.369661][T14326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.379622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.168517][T15697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1217.877847][T15719] netlink: 'syz.7.2649': attribute type 1 has an invalid length. [ 1217.974440][T15721] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1217.988462][T15721] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1217.997527][T15721] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1218.047865][T15721] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1218.238691][T15725] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2649'. [ 1218.379950][T15721] bond1: (slave geneve3): making interface the new active one [ 1218.501241][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.503071][T15721] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1218.517446][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.527339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.545524][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.587818][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.849409][T15731] comedi comedi3: dt2801: I/O port conflict (0x1,2) [ 1218.865374][T15719] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1218.913157][T15725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1219.127744][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.136653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.265011][T15502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1219.306007][T15502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1219.346317][T15502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1219.894096][T15502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1223.017376][T15502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.143502][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.188168][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.195432][ T9665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.693070][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.702854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.872741][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.880025][T14322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.378815][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.380064][T15502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1224.387818][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.399367][T15502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.406721][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.408147][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.434289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.378863][T15781] usb usb1: usbfs: process 15781 (syz.8.2663) did not claim interface 0 before use [ 1225.513796][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2664'. [ 1225.684132][T15784] bridge_slave_1: entered promiscuous mode [ 1225.709274][T15784] macvtap1: entered promiscuous mode [ 1225.724337][T15784] bond0: entered promiscuous mode [ 1225.740572][T15784] macvtap1: entered allmulticast mode [ 1225.762072][T15784] bond0: entered allmulticast mode [ 1225.777029][T15784] bridge_slave_1: entered allmulticast mode [ 1225.808570][T15784] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1226.477243][T15502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.738493][T15795] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1229.367752][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.377398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.387471][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 660 seconds [ 1229.398562][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 660 seconds [ 1230.359933][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 660 seconds [ 1230.371045][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 660 seconds [ 1230.374100][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.574325][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.644720][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.653560][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.662720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.828566][T15502] veth0_vlan: entered promiscuous mode [ 1232.837293][T15828] delete_channel: no stack [ 1233.410538][T15837] tipc: Enabled bearer , priority 10 [ 1233.624284][T15502] veth1_vlan: entered promiscuous mode [ 1233.799125][T15502] veth0_macvtap: entered promiscuous mode [ 1233.822919][T15502] veth1_macvtap: entered promiscuous mode [ 1235.135290][T15502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.222317][T15502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.305476][T15502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.047139][ T5850] Bluetooth: hci1: ISO packet too small [ 1236.053319][T15502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.075290][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.083506][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.092727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.112111][T15502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.772102][T15502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.031038][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.039635][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.049959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.059342][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.403893][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.893033][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.024433][ T9644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.049815][ T9644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.973341][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.982956][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.453692][ T9660] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.671548][ T9660] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.870729][ T9660] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.017389][ T9660] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.232738][ T9660] bridge_slave_1: left allmulticast mode [ 1240.240636][ T9660] bridge_slave_1: left promiscuous mode [ 1240.247177][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.259682][ T9660] bridge_slave_0: left allmulticast mode [ 1240.265742][ T9660] bridge_slave_0: left promiscuous mode [ 1240.271911][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.745646][ T9660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.760521][ T9660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.772536][ T9660] bond0 (unregistering): Released all slaves [ 1241.093845][ T9660] hsr_slave_0: left promiscuous mode [ 1241.100553][ T9660] hsr_slave_1: left promiscuous mode [ 1241.106943][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.114389][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.125244][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.133596][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.165642][ T9660] veth1_macvtap: left promiscuous mode [ 1241.171550][ T9660] veth0_macvtap: left promiscuous mode [ 1241.178090][ T9660] veth1_vlan: left promiscuous mode [ 1241.183547][ T9660] veth0_vlan: left promiscuous mode [ 1242.838769][ T5850] Bluetooth: hci1: ISO packet too small [ 1242.970555][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.979801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.988410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.998207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.524733][T12146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1243.540378][T12146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1243.550508][T12146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1243.607297][T12146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1243.617381][T12146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1243.924522][T15909] syz.6.2693: attempt to access beyond end of device [ 1243.924522][T15909] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1243.937991][T15909] qnx6: unable to read the first superblock [ 1243.944929][T15909] syz.6.2693: attempt to access beyond end of device [ 1243.944929][T15909] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1243.957911][T15909] qnx6: unable to read the first superblock [ 1243.963890][T15909] qnx6: unable to read the first superblock [ 1245.234876][T15917] xt_cgroup: invalid path, errno=-2 [ 1245.841057][T12146] Bluetooth: hci0: command tx timeout [ 1246.561118][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2697'. [ 1247.077838][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.945332][T12146] Bluetooth: hci0: command tx timeout [ 1248.287494][T15934] Bluetooth: MGMT ver 1.23 [ 1248.865943][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.874889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.916683][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.926332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.128437][ T9660] team0 (unregistering): Port device team_slave_1 removed [ 1250.026468][ T5850] Bluetooth: hci0: command tx timeout [ 1250.414925][ T9660] team0 (unregistering): Port device team_slave_0 removed [ 1250.910361][T12146] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1252.098156][T12146] Bluetooth: hci0: command 0x0419 tx timeout [ 1252.675661][T15961] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1254.473063][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.482717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.492179][T14326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.494960][T12146] Bluetooth: hci0: command 0x0419 tx timeout [ 1254.502005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.246309][T15970] kvm: kvm [15969]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xf509 [ 1255.414721][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1255.425406][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1255.441949][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1255.463419][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1255.471696][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1256.427081][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.642612][T15973] lo speed is unknown, defaulting to 1000 [ 1257.725361][T12146] Bluetooth: hci5: command tx timeout [ 1257.761589][T15903] lo speed is unknown, defaulting to 1000 [ 1259.516311][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 690 seconds [ 1259.766431][ T5850] Bluetooth: hci5: command tx timeout [ 1260.124287][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.133908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.151108][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.161007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.501973][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 690 seconds [ 1260.522247][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 690 seconds [ 1260.533960][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 690 seconds [ 1260.796129][T16024] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1261.847321][ T5850] Bluetooth: hci5: command tx timeout [ 1263.395761][T15903] chnl_net:caif_netlink_parms(): no params data found [ 1263.481473][T16042] overlayfs: failed to clone upperpath [ 1264.216081][ T5850] Bluetooth: hci5: command tx timeout [ 1264.380322][T15973] chnl_net:caif_netlink_parms(): no params data found [ 1265.847457][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.856185][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.864702][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.872831][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.881676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.301054][T16071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1268.099723][T15903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.115619][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.123138][T15903] bridge_slave_0: entered allmulticast mode [ 1268.318960][T16082] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 1268.359593][T15903] bridge_slave_0: entered promiscuous mode [ 1269.299505][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.316183][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.334159][T15973] bridge_slave_0: entered allmulticast mode [ 1269.352079][T15973] bridge_slave_0: entered promiscuous mode [ 1269.418326][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.476658][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.548989][T15973] bridge_slave_1: entered allmulticast mode [ 1269.559101][T15973] bridge_slave_1: entered promiscuous mode [ 1269.580280][T15903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.593516][T15903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.602992][T15903] bridge_slave_1: entered allmulticast mode [ 1269.618260][T15903] bridge_slave_1: entered promiscuous mode [ 1271.066584][T13136] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1271.402236][T15903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.430795][T15903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.613728][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.623076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.647057][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.656749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.161690][T15973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.204617][T13136] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1272.228963][T13136] usb 4-1: not running at top speed; connect to a high speed hub [ 1272.259753][T13136] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 1272.278778][T13136] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1272.298367][T13136] usb 4-1: config 253 has no interface number 0 [ 1272.304976][T13136] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.327236][T15973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.460304][T13136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1272.490494][T13136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.513515][T13136] usb 4-1: Product: syz [ 1272.533763][T13136] usb 4-1: Manufacturer: syz [ 1272.544310][T13136] usb 4-1: SerialNumber: syz [ 1272.574522][T15903] team0: Port device team_slave_0 added [ 1272.594251][T15973] team0: Port device team_slave_0 added [ 1272.617697][T15903] team0: Port device team_slave_1 added [ 1272.652111][T15973] team0: Port device team_slave_1 added [ 1272.669024][T16102] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1272.679081][T16102] netlink: zone id is out of range [ 1272.684584][T16102] netlink: zone id is out of range [ 1272.726567][T16102] netlink: get zone limit has 8 unknown bytes [ 1272.779270][T16092] delete_channel: no stack [ 1272.812382][T13136] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 1272.833687][T13136] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 1272.940856][T13136] usb 4-1: USB disconnect, device number 52 [ 1272.995192][T15903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.006370][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.039623][T15903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.055876][T15973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.068254][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.103187][T15973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.121830][T16080] delete_channel: no stack [ 1273.137701][T15903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.144811][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.174572][T15903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.398449][T15973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.405466][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.986613][T15973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.084882][T15903] hsr_slave_0: entered promiscuous mode [ 1275.094486][T15903] hsr_slave_1: entered promiscuous mode [ 1275.133913][T15903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.159575][T15903] Cannot create hsr debugfs directory [ 1275.448109][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.722267][T15973] hsr_slave_0: entered promiscuous mode [ 1275.819354][T15973] hsr_slave_1: entered promiscuous mode [ 1275.890273][T15973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.954270][T15973] Cannot create hsr debugfs directory [ 1277.568964][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.578845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.588730][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.598269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.452051][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.460264][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.469987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.478940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.984269][T16161] delete_channel: no stack [ 1284.497495][T15973] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1284.510630][T15973] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1284.533834][T15973] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1284.560686][T15973] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1284.895496][T15973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.047215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.732103][T16184] overlayfs: failed to clone upperpath [ 1285.762188][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.106590][T15973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.227986][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.235179][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.283936][T15903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1286.326614][T15903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1286.378686][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.385916][ T9646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.429929][T15903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1287.228591][T15903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1287.505647][T15973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1287.974077][T15903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.151360][T15903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.275325][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.282552][ T9646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.390775][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.398006][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.694345][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.928818][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.938749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.021248][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.030175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.531300][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 720 seconds [ 1290.542159][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 720 seconds [ 1290.553712][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 720 seconds [ 1290.568735][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 720 seconds [ 1291.535550][T15903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.626130][T12656] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1291.634437][T16245] overlayfs: failed to clone upperpath [ 1291.806307][T12656] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1291.862426][T12656] usb 4-1: not running at top speed; connect to a high speed hub [ 1291.884844][T12656] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 1291.895114][T12656] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 1291.915592][T12656] usb 4-1: config 253 has no interface number 0 [ 1291.949806][T12656] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1291.990960][T12656] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 1292.008915][T12656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.020533][T12656] usb 4-1: Product: syz [ 1292.024741][T12656] usb 4-1: Manufacturer: syz [ 1292.029567][T12656] usb 4-1: SerialNumber: syz [ 1292.616556][T16257] overlayfs: failed to clone upperpath [ 1293.160678][T16231] delete_channel: no stack [ 1293.316619][T12656] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 1293.323267][T12656] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 1293.351447][T12656] usb 4-1: USB disconnect, device number 53 [ 1293.404077][T15973] veth0_vlan: entered promiscuous mode [ 1293.442121][T15973] veth1_vlan: entered promiscuous mode [ 1293.662626][T15973] veth0_macvtap: entered promiscuous mode [ 1294.104157][T15973] veth1_macvtap: entered promiscuous mode [ 1294.315236][T15973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.585577][T15903] veth0_vlan: entered promiscuous mode [ 1294.608445][T15973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.648996][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.657174][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.665909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.674664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.757781][T15973] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.378236][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.387407][T15973] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.403211][T15973] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.411983][T15973] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.274030][T15903] veth1_vlan: entered promiscuous mode [ 1301.168664][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.176856][ T9644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.185711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.194617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.208071][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.214408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.172070][T14324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.196389][T14324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.299052][ T9644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.318482][ T9644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.073634][ T9658] bridge_slave_1: left allmulticast mode [ 1303.079419][ T9658] bridge_slave_1: left promiscuous mode [ 1303.085595][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.098286][ T9658] bridge_slave_0: left allmulticast mode [ 1303.104282][ T9658] bridge_slave_0: left promiscuous mode [ 1303.110931][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.946550][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.816827][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.826418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.917483][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.927185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.122548][T12146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1309.133393][T12146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1309.142387][T12146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1309.152713][T12146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1309.161220][T12146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1310.342505][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2791'. [ 1310.786224][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2791'. [ 1311.210938][T12146] Bluetooth: hci0: command tx timeout [ 1311.279486][ T9658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.296919][ T9658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.335544][ T9658] bond0 (unregistering): Released all slaves [ 1311.732799][T16338] lo speed is unknown, defaulting to 1000 [ 1312.052951][T16353] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1313.072887][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.081858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.118564][ T9658] hsr_slave_0: left promiscuous mode [ 1313.138224][ T9658] hsr_slave_1: left promiscuous mode [ 1313.151473][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.166519][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.310982][T12146] Bluetooth: hci0: command tx timeout [ 1313.619201][ T9658] veth1_vlan: left promiscuous mode [ 1313.624714][ T9658] veth0_vlan: left promiscuous mode [ 1314.504468][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.548112][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.574661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.378552][T12146] Bluetooth: hci0: command tx timeout [ 1316.016019][ T5903] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1316.413634][ T5903] usb 4-1: no configurations [ 1316.475047][ T5903] usb 4-1: can't read configurations, error -22 [ 1317.047522][ T5903] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1317.161576][T16394] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1317.376021][ T5903] usb 4-1: no configurations [ 1317.464242][ T5903] usb 4-1: can't read configurations, error -22 [ 1317.475421][T13689] Bluetooth: hci6: Frame reassembly failed (-84) [ 1317.485066][ T5850] Bluetooth: hci0: command tx timeout [ 1317.640994][ T5903] usb usb4-port1: attempt power cycle [ 1318.992798][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.002551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.446142][T12146] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1319.584390][T16398] Bluetooth: MGMT ver 1.23 [ 1319.616181][T16397] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1319.927637][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.936470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.936894][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 750 seconds [ 1320.948757][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 750 seconds [ 1320.959962][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 750 seconds [ 1320.971719][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 750 seconds [ 1321.686335][T12146] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1322.597549][ T9658] team0 (unregistering): Port device team_slave_1 removed [ 1323.428279][ T9658] team0 (unregistering): Port device team_slave_0 removed [ 1324.125231][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.730113][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.739089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.030008][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.039997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.324518][ T30] audit: type=1800 audit(1752194521.760:220): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2814" name="/" dev="9p" ino=2 res=0 errno=0 [ 1326.669307][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1328.633713][T16438] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1328.644092][T16438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1328.654183][T16438] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1330.919359][T16461] trusted_key: encrypted_key: insufficient parameters specified [ 1331.119243][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2818'. [ 1331.452012][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.461408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.721203][T16338] chnl_net:caif_netlink_parms(): no params data found [ 1331.862885][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.871839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.698710][T13136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.664252][T16338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.690745][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.725198][T16338] bridge_slave_0: entered allmulticast mode [ 1334.764988][T16338] bridge_slave_0: entered promiscuous mode [ 1334.832247][T16338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.853821][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.872274][T16338] bridge_slave_1: entered allmulticast mode [ 1334.888083][T16338] bridge_slave_1: entered promiscuous mode [ 1336.200742][T16338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.275591][T16338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.196479][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.205592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.384888][T16507] trusted_key: encrypted_key: insufficient parameters specified [ 1337.863573][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'. [ 1339.267380][T16338] team0: Port device team_slave_0 added [ 1339.371397][T16338] team0: Port device team_slave_1 added [ 1339.583321][T16338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.606726][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.861015][T16338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.877731][T16338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.885216][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.940122][T16338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.899397][T16526] /dev/nullb0: Can't open blockdev [ 1342.574969][T16338] hsr_slave_0: entered promiscuous mode [ 1342.627315][T16338] hsr_slave_1: entered promiscuous mode [ 1342.647151][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.656069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.678432][T16338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.925295][T16338] Cannot create hsr debugfs directory [ 1343.943062][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.440452][T16540] netlink: 'syz.3.2838': attribute type 7 has an invalid length. [ 1344.536157][T16540] : entered promiscuous mode [ 1345.241110][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2839'. [ 1345.848696][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.857730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.315081][T16549] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 1347.730315][T16564] overlayfs: failed to clone upperpath [ 1349.126634][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.136334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.434517][T16338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1349.470769][T16338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1349.485250][T16338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1349.510409][T16338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1350.435530][T16576] kvm: kvm [16575]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1350.778272][T16592] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2852'. [ 1351.166035][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 780 seconds [ 1351.177175][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 780 seconds [ 1351.188517][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 780 seconds [ 1351.199691][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 780 seconds [ 1352.005485][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.014524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.156496][T16338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.297825][T16338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.371252][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.378517][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.571379][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.571587][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.940299][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.808436][ T9661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.818425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.987761][T16626] input: syz1 as /devices/virtual/input/input49 [ 1357.509100][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.518065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.699891][T16638] lo speed is unknown, defaulting to 1000 [ 1358.613157][T16338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.584979][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.594412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.126392][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.136165][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.263071][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.273039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.545773][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.573969][ T9646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.584609][T16338] veth0_vlan: entered promiscuous mode [ 1363.608264][T16338] veth1_vlan: entered promiscuous mode [ 1363.751691][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.769195][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.229835][ T9646] bridge_slave_1: left allmulticast mode [ 1365.235570][ T9646] bridge_slave_1: left promiscuous mode [ 1365.498241][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.497245][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.506192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.515700][ T9646] bridge_slave_0: left allmulticast mode [ 1366.536061][ T9646] bridge_slave_0: left promiscuous mode [ 1367.139008][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.634692][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.643909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.595354][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1370.607179][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1370.626251][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1370.636900][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1370.647276][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1371.635617][T16690] syz.6.2874 (16690): drop_caches: 2 [ 1372.926614][T12146] Bluetooth: hci0: command tx timeout [ 1372.960139][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.970189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.312807][ T30] audit: type=1326 audit(1752194568.750:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.7.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389ab8e929 code=0x7ffc0000 [ 1373.592351][ T30] audit: type=1326 audit(1752194568.750:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16724 comm="syz.7.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389ab8e929 code=0x7ffc0000 [ 1373.668378][T12656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.375605][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 1374.448793][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 1374.976778][T12146] Bluetooth: hci0: command tx timeout [ 1375.217323][ T9646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1375.244219][ T9646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1375.288693][ T9646] bond0 (unregistering): Released all slaves [ 1375.288993][T14322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.304668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.632287][T16716] lo speed is unknown, defaulting to 1000 [ 1377.047058][T12146] Bluetooth: hci0: command tx timeout [ 1377.286812][T16749] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1378.206843][ T9646] hsr_slave_0: left promiscuous mode [ 1378.283896][ T9646] hsr_slave_1: left promiscuous mode [ 1378.336596][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.496867][ T9646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.150418][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.160549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.228158][ T5844] Bluetooth: hci0: command tx timeout [ 1379.287045][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 1379.501200][ T9646] veth1_vlan: left promiscuous mode [ 1379.524500][ T9646] veth0_vlan: left promiscuous mode [ 1379.932227][T16767] Invalid ELF header magic: != ELF [ 1381.079882][T14324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.088824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.695373][ T7861] block nbd0: Possible stuck request ffff888025605080: control (read@0,1024B). Runtime 810 seconds [ 1381.709091][ T7861] block nbd0: Possible stuck request ffff888025605240: control (read@1024,1024B). Runtime 810 seconds [ 1381.722151][ T7861] block nbd0: Possible stuck request ffff888025605400: control (read@2048,1024B). Runtime 810 seconds [ 1382.187999][ T7861] block nbd0: Possible stuck request ffff8880256055c0: control (read@3072,1024B). Runtime 810 seconds [ 1383.659885][ T31] INFO: task syz.8.2687:15876 blocked for more than 143 seconds. [ 1383.917777][ T31] Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 [ 1383.926118][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1384.136051][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1384.350970][ T31] task:syz.8.2687 state:D stack:25928 pid:15876 tgid:15874 ppid:13702 task_flags:0x400140 flags:0x00004004 [ 1384.414663][ T31] Call Trace: [ 1385.284234][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.294975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.317797][ T31] [ 1385.424871][ T31] __schedule+0x16a2/0x4cb0 [ 1385.526541][ T31] ? schedule+0x165/0x360 [ 1385.531830][ T31] ? __pfx___schedule+0x10/0x10 [ 1385.576013][ T31] ? schedule+0x91/0x360 [ 1385.602373][ T31] schedule+0x165/0x360 [ 1385.618626][ T31] schedule_preempt_disabled+0x13/0x30 [ 1385.624851][ T31] __mutex_lock+0x724/0xe80 [ 1385.672708][ T31] ? __mutex_lock+0x51b/0xe80 [ 1385.713266][ T31] ? sync_bdevs+0x1ac/0x340 [ 1385.731660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1385.756638][ T31] ? iput+0x398/0x9d0 [ 1385.761205][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1385.806098][ T31] sync_bdevs+0x1ac/0x340 [ 1385.811572][ T31] ksys_sync+0xb9/0x150 [ 1385.856780][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1385.862617][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1385.918110][ T31] __ia32_sys_sync+0xe/0x20 [ 1385.936725][ T31] do_syscall_64+0xfa/0x3b0 [ 1385.942246][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.986010][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1386.023879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1386.046682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.067388][ T31] RIP: 0033:0x7fd5bb18e929 [ 1386.072722][ T31] RSP: 002b:00007fd5bbf8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1386.126456][ T31] RAX: ffffffffffffffda RBX: 00007fd5bb3b6080 RCX: 00007fd5bb18e929 [ 1386.166493][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1386.175737][ T31] RBP: 00007fd5bb3b6080 R08: 0000000000000000 R09: 0000000000000000 [ 1386.217631][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.266691][ T31] R13: 0000000000000000 R14: 00007fd5bb3b6080 R15: 00007fffd3780b28 [ 1386.306735][ T31] [ 1386.310811][ T31] [ 1386.310811][ T31] Showing all locks held in the system: [ 1386.411782][ T31] 1 lock held by khungtaskd/31: [ 1386.418006][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1386.526079][ T31] 3 locks held by kworker/1:3/981: [ 1386.531994][ T31] 2 locks held by getty/5595: [ 1386.607074][ T31] #0: ffff88803124e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1386.663129][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1386.712379][ T31] 1 lock held by udevd/9069: [ 1386.736109][ T31] #0: ffff8880254fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1386.772265][ T31] 5 locks held by kworker/u8:17/9646: [ 1386.796012][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1386.808938][ T9658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.819789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.855971][ T31] #1: ffffc9000e767bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1386.911173][ T31] #2: ffffffff8f4fe950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1386.958476][ T31] #3: ffffffff8f50b548 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 1387.016000][ T31] #4: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1387.065995][ T31] 3 locks held by kworker/u8:24/9661: [ 1387.072263][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1387.136027][ T31] #1: ffffc9000bc07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1387.186016][ T31] #2: ffffffff8f50b548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1387.195407][ T31] 1 lock held by syz-executor/12369: [ 1387.246058][ T31] #0: ffffffff8f50b548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1387.255539][ T31] 1 lock held by syz.8.2687/15876: [ 1387.306001][ T31] #0: ffff8880254fb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 1387.336058][ T31] 2 locks held by syz-executor/16716: [ 1387.341794][ T31] #0: ffffffff8f4fe950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1387.396005][ T31] #1: ffffffff8f50b548 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1387.416006][ T31] [ 1387.418887][ T31] ============================================= [ 1387.418887][ T31] [ 1387.496006][ T31] NMI backtrace for cpu 0 [ 1387.496036][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1387.496061][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1387.496075][ T31] Call Trace: [ 1387.496084][ T31] [ 1387.496094][ T31] dump_stack_lvl+0x189/0x250 [ 1387.496123][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1387.496156][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.496181][ T31] ? __pfx__printk+0x10/0x10 [ 1387.496232][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1387.496266][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1387.496291][ T31] ? _printk+0xcf/0x120 [ 1387.496324][ T31] ? __pfx__printk+0x10/0x10 [ 1387.496354][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1387.496391][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1387.496422][ T31] watchdog+0xfee/0x1030 [ 1387.496457][ T31] ? watchdog+0x1de/0x1030 [ 1387.496498][ T31] kthread+0x711/0x8a0 [ 1387.496532][ T31] ? __pfx_watchdog+0x10/0x10 [ 1387.496562][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.496593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1387.496623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.496655][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.496684][ T31] ret_from_fork+0x3fc/0x770 [ 1387.496708][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1387.496736][ T31] ? __switch_to_asm+0x39/0x70 [ 1387.496761][ T31] ? __switch_to_asm+0x33/0x70 [ 1387.496785][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.496815][ T31] ret_from_fork_asm+0x1a/0x30 [ 1387.496857][ T31] [ 1387.496866][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1387.667649][ C1] NMI backtrace for cpu 1 [ 1387.667668][ C1] CPU: 1 UID: 0 PID: 16789 Comm: syz.9.2899 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1387.667693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1387.667705][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 1387.667737][ C1] Code: b7 8d e8 de 5b e4 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 1387.667753][ C1] RSP: 0018:ffffc90000a08d18 EFLAGS: 00000246 [ 1387.667770][ C1] RAX: ffffffff8951f9e7 RBX: ffff888025cf7000 RCX: ffffffff8951fa00 [ 1387.667785][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888025cf7160 [ 1387.667797][ C1] RBP: 0000000000000000 R08: ffff888025cf715f R09: 1ffff11004b9ee2b [ 1387.667810][ C1] R10: dffffc0000000000 R11: ffffed1004b9ee2c R12: dffffc0000000000 [ 1387.667823][ C1] R13: 1ffff11004b9ee02 R14: ffff888025cf7010 R15: ffff888025cf7000 [ 1387.667837][ C1] FS: 00007f33ed7d06c0(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 1387.667852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1387.667864][ C1] CR2: 000020000030e030 CR3: 000000007fe40000 CR4: 00000000003526f0 [ 1387.667880][ C1] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 1387.667891][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1387.667902][ C1] Call Trace: [ 1387.667910][ C1] [ 1387.667918][ C1] qdisc_run+0x60/0x230 [ 1387.667948][ C1] net_tx_action+0x7c9/0x980 [ 1387.667966][ C1] ? net_tx_action+0x634/0x980 [ 1387.667982][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1387.668001][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 1387.668027][ C1] handle_softirqs+0x283/0x870 [ 1387.668049][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1387.668070][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1387.668091][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1387.668118][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1387.668136][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1387.668160][ C1] irq_exit_rcu+0x9/0x30 [ 1387.668177][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1387.668204][ C1] [ 1387.668210][ C1] [ 1387.668217][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1387.668237][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1387.668262][ C1] Code: 74 05 e8 4b 1c 5d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 13 3d 26 f6 65 8b 05 dc 6a 32 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1387.668278][ C1] RSP: 0018:ffffc900033c7560 EFLAGS: 00000206 [ 1387.668292][ C1] RAX: a92acaf50b0dce00 RBX: 0000000000000a06 RCX: a92acaf50b0dce00 [ 1387.668306][ C1] RDX: 0000000000000006 RSI: ffffffff8d985220 RDI: 0000000000000001 [ 1387.668317][ C1] RBP: ffffc900033c75f8 R08: ffffffff8fa0c9f7 R09: 1ffffffff1f4193e [ 1387.668331][ C1] R10: dffffc0000000000 R11: fffffbfff1f4193f R12: dffffc0000000000 [ 1387.668344][ C1] R13: 1ffff1100c6cb02d R14: ffff888063658100 R15: 1ffff92000678eac [ 1387.668369][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1387.668401][ C1] __skb_try_recv_datagram+0x17c/0x4e0 [ 1387.668436][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1387.668460][ C1] __unix_dgram_recvmsg+0x2d5/0xde0 [ 1387.668488][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1387.668511][ C1] ? exc_page_fault+0x9f/0xf0 [ 1387.668541][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1387.668563][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1387.668587][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 1387.668617][ C1] ____sys_recvmsg+0x3aa/0x460 [ 1387.668644][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1387.668676][ C1] ? import_iovec+0x74/0xa0 [ 1387.668698][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1387.668723][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1387.668764][ C1] ? __might_fault+0xb0/0x130 [ 1387.668791][ C1] do_recvmmsg+0x307/0x770 [ 1387.668819][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1387.668850][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1387.668872][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1387.668901][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1387.668926][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1387.668952][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1387.668971][ C1] do_syscall_64+0xfa/0x3b0 [ 1387.668987][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.669012][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.669030][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1387.669050][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.669067][ C1] RIP: 0033:0x7f33ec98e929 [ 1387.669082][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.669096][ C1] RSP: 002b:00007f33ed7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1387.669113][ C1] RAX: ffffffffffffffda RBX: 00007f33ecbb6080 RCX: 00007f33ec98e929 [ 1387.669126][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1387.669138][ C1] RBP: 00007f33eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1387.669149][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1387.669160][ C1] R13: 0000000000000001 R14: 00007f33ecbb6080 R15: 00007ffd95d8ad98 [ 1387.669183][ C1] [ 1387.676275][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1387.676311][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1387.676343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1387.676358][ T31] Call Trace: [ 1387.676373][ T31] [ 1387.676387][ T31] dump_stack_lvl+0x99/0x250 [ 1387.676422][ T31] ? __asan_memcpy+0x40/0x70 [ 1387.676467][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.676495][ T31] ? __pfx__printk+0x10/0x10 [ 1387.676544][ T31] panic+0x2db/0x790 [ 1387.676576][ T31] ? __pfx_panic+0x10/0x10 [ 1387.676602][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1387.676637][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1387.676675][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1387.676717][ T31] watchdog+0x102d/0x1030 [ 1387.676756][ T31] ? watchdog+0x1de/0x1030 [ 1387.676815][ T31] kthread+0x711/0x8a0 [ 1387.676853][ T31] ? __pfx_watchdog+0x10/0x10 [ 1387.676888][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.676921][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1387.676956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.676991][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.677023][ T31] ret_from_fork+0x3fc/0x770 [ 1387.677053][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1387.677086][ T31] ? __switch_to_asm+0x39/0x70 [ 1387.677114][ T31] ? __switch_to_asm+0x33/0x70 [ 1387.677143][ T31] ? __pfx_kthread+0x10/0x10 [ 1387.677177][ T31] ret_from_fork_asm+0x1a/0x30 [ 1387.677225][ T31] [ 1388.389505][ T31] Kernel Offset: disabled [ 1388.394465][ T31] Rebooting in 86400 seconds..