last executing test programs: 2m48.587221708s ago: executing program 3 (id=169): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m48.356959595s ago: executing program 3 (id=172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1e00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m43.760005251s ago: executing program 3 (id=180): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x7a, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x33b1026, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x7, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x4, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x9, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x2, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x5, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x1571, 0x7, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x9, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x1, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x3ff, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0x6, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbb, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x3, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x3, 0x0, 0x0, 0x6, 0x9, 0x9, 0x49e88dee, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x1fd, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bd, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x87c}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.579637937s ago: executing program 3 (id=183): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2m42.594307278s ago: executing program 3 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x4) 2m42.153505402s ago: executing program 3 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000040)='\x00', 0x101801, &(0x7f0000000100)={@_ha_fsid={[0x10000, 0x3]}, {0x6, 0x185, 0x329, 0x80}}, 0x1f8, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getgid() connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x40054) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000880), 0x0, 0x1) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCSETS(r5, 0x404c4701, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x9) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000c00) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m27.090884481s ago: executing program 32 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000040)='\x00', 0x101801, &(0x7f0000000100)={@_ha_fsid={[0x10000, 0x3]}, {0x6, 0x185, 0x329, 0x80}}, 0x1f8, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getgid() connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x40054) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000880), 0x0, 0x1) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCSETS(r5, 0x404c4701, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x9) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000c00) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.437890029s ago: executing program 2 (id=1017): r0 = socket$kcm(0x29, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000340)) sendmsg$kcm(r0, 0x0, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0xe, 0xc}, {0xfff1, 0x5}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009000100"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000008c0)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0xffffffffffffffff}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x400}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee, 0x2c}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {0x3ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {0xf33, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x2}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x4c001}, 0x20050841) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.491925871s ago: executing program 0 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) 7.356426896s ago: executing program 0 (id=1027): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="8c15d6644b8d3401adbf061fbe5223c5d59119f6ca7c1697e3", 0x19}, {&(0x7f0000000680)="1947597dea9f0f4a01f1d14a58f4c12c5e2fc94d10615872f04c99fb7fa4768198114d6f2510ef645c082160d4a1d575b85db7381c927db9d7355362f2d1953d5c5ad3278280521598d474b9d2b6165801c51b68a494d6b493afa4cb2019ddd1c69a6a801798028359c134d92be08d2d690364d1ebaef586df2c8792950a335316d24f75a7b9912d951482b1ff05a90462319f09ad2d683c4bc6f4f0736a67710d93c5a51db9a61fd209ba13d5d78fad6e43c7b1c25979e3f24469f68bf9b699", 0xc0}, {&(0x7f0000000900)="28d81e", 0x3}], 0x3, &(0x7f0000000980)=[@ip_retopts={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000cc0)="79bfc144c4c525e196e5dbc7b6859ccedeed94bdae5932f50a5fbb9fc4f04b471ab3d0235b362cb3233bdcb8a0cf02c28985d89da4b2", 0x36}, {&(0x7f0000000d00)="09fd9fe1d7cde071df1ee3288a6645058d1fcf7c25cd31fb50c12ddeb7921cca97a9e254aeb6ff9bfd5d9bb8d0bb9d40bce96872602cf7cd0206702aa1250a5d36810edaeb9835b7769280726c9ddae8e75930ba53ccdd5d41dd6c4e606e152994c9fea7cb0dc3544dd01e221e268a95f2593d5087789aa428f8283073dfd755f8e785f4d892c25d69bb73cd246efa2e1b0d2fda76d5397b7553dd357da59850d5db79a33865a206cc330bd07ddef9870c380de8453ae9d3b8a0f0349e2a405ac385bc11ea8f8b646e68a271859480bf6274f5d13dbd506c2edfd3594cb2a608150cb51f47a36ee4e9", 0xe9}, {&(0x7f0000000e00)="6e6fe6b112843ef70f427639093fe3e680d0e3c14f1dd5f90ea8c97ed4bdb11f764f522c3c8fe54a257ff664594910e188a0f90a356e30b2784ca46eb73afff82f2d1b23d5adf5627baf8cfef7be2a48545af4f69f9b8492080924a200a2535174dc39811decd149255144ff84cccd7110b899cb224ffb4cec49739a28eef5f5bdfd9d82c02284c333fca2b0e371db34a2a53c532b5aff57717debf3a60fd19c78779c75718e69279e9752bbcaf4fbe7cfee7ff804", 0xb5}, {&(0x7f0000001040)="f4f3dced06654bb0871debaccbf1f1f5dfcdb0d4da35323e2558b1bfa466a2d1877bf1534411b724fb2c0a23cf27f13a9b98c47ca5208737a64b2a5f8660485110a14ca161fc463febbf3e377a962460c330b5022653c071fa3ee6f2e00bf65a4cd93718ad90dc431aca7b8a34d707ef9a502366b0d75342da647e70dc674b2058", 0x81}, {&(0x7f0000001100)="0dd6066936dee6fc25b54e462b910274e8582a24387adf7571e5aec3ca40cf1b1a6074087d30d3583b5395ca93aa7b9d470504aac6427fbccda91606c3241d67f558d755be26ebf1cb20191d45c35b56cdad87dac8342ba276337a3297a00e7e2aabef40e5f93d94cd6084694aeef9163972c283d5d3f67f6954bfd44fc84d4a676885a9d766513416e250d1501dca72b4ab1e9c478076c998bd02a322", 0x9d}, {&(0x7f00000011c0)="575064afeda318e1b7", 0x9}], 0x6}}, {{&(0x7f00000014c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001500)}], 0x1, &(0x7f0000001600)}}], 0x5, 0x4004) 6.512706072s ago: executing program 0 (id=1028): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000300)={0x20, 0xf, 0x2, {0x2, 0x11}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x601, 0x1e, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0xd, 0x3, "eafbda"}, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 5.883502152s ago: executing program 4 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) close(0x4) 5.731850987s ago: executing program 4 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 5.632936751s ago: executing program 4 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000033", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.409720838s ago: executing program 2 (id=1035): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.179597265s ago: executing program 2 (id=1036): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x56}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1d8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 5.071796048s ago: executing program 2 (id=1039): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 4.72054638s ago: executing program 4 (id=1040): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.581013074s ago: executing program 4 (id=1041): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x26, 0x0, 0x0, 0x0, 0x27}, 0x1}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) socket$kcm(0x10, 0x2, 0x0) 4.181487176s ago: executing program 2 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x8, 0x0, 0xf, 0x10, 0x1, 0x6, 0x2, 0x8, 0x0, 0x7, 0xfd, 0x2, 0x7, 0x8b, 0x6], 0x3, [0xc, 0x0, 0x7fff, 0x2002, 0x8, 0x4, 0x6, 0xd03, 0xae, 0x2, 0xb, 0x1, 0x6, 0x6, 0xd, 0x100], [0xf06f, 0x5, 0xffff, 0xfff5, 0x9, 0x5, 0x3, 0x2a, 0x401, 0x2, 0xc, 0x7, 0xfffc, 0x3, 0x4, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.051294622s ago: executing program 4 (id=1043): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 2.875839438s ago: executing program 2 (id=1045): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.80487058s ago: executing program 1 (id=1047): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) 2.731737163s ago: executing program 0 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000033", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.720527453s ago: executing program 1 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x8, 0x0, 0xf, 0x10, 0x1, 0x6, 0x2, 0x8, 0x0, 0x7, 0xfd, 0x2, 0x7, 0x8b, 0x6], 0x3, [0xc, 0x0, 0x7fff, 0x2002, 0x8, 0x4, 0x6, 0xd03, 0xae, 0x2, 0xb, 0x1, 0x6, 0x6, 0xd, 0x100], [0xf06f, 0x5, 0xffff, 0xfff5, 0x9, 0x5, 0x3, 0x2a, 0x401, 0x2, 0xc, 0x7, 0xfffc, 0x3, 0x4, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.544028289s ago: executing program 1 (id=1050): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.819955761s ago: executing program 0 (id=1051): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x26, 0x0, 0x0, 0x0, 0x27}, 0x1}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) socket$kcm(0x10, 0x2, 0x0) 1.703313325s ago: executing program 1 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x1b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r7, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 102.834426ms ago: executing program 1 (id=1053): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x58}, 0x20040044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001114e77d918c700500000000080001000000000008004b0013"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000300000014000780080011400000003d050015000e0000000500010006000000050005000200000005000400010000000900020073797a32000000000d000300686173683a6e657400d1b7"], 0x5c}, 0x1, 0x0, 0x0, 0x48004}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) close(r0) 32.092928ms ago: executing program 0 (id=1054): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000000)='GPL\x00', 0x2, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x4d89c374, 0x1, 0x8}, 0x1000b, 0xfffffffe, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x5, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=1055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0f00000000000003000008000000180001801400020073797a5f74756e0000000000000000000800028004000380"], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x149102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x785ad8a916ba46ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070000000c000000ff"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = syz_open_dev$video(0x0, 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315559, 0x280, 0x4, 0x3, @discrete={0x0, 0x8}}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000000c0)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 72.480792][ T5758] cgroup: Unknown subsys name 'net' [ 72.610855][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.964317][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.459561][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.469585][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.477759][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.485425][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.494102][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.501970][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.507830][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.510013][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.516946][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.530776][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.531881][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.538804][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.546609][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.554423][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.560235][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.566883][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.581019][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.589468][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.614047][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.624815][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.638514][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.645894][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.655571][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.662714][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.951196][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.086101][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.141108][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.163443][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.171762][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.179377][ T5769] bridge_slave_0: entered allmulticast mode [ 76.186845][ T5769] bridge_slave_0: entered promiscuous mode [ 76.208433][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.217344][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.224813][ T5769] bridge_slave_1: entered allmulticast mode [ 76.231506][ T5769] bridge_slave_1: entered promiscuous mode [ 76.242969][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.294491][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.318632][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.391042][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.398249][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.406099][ T5770] bridge_slave_0: entered allmulticast mode [ 76.412789][ T5770] bridge_slave_0: entered promiscuous mode [ 76.422990][ T5769] team0: Port device team_slave_0 added [ 76.432083][ T5769] team0: Port device team_slave_1 added [ 76.455276][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.462418][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.469856][ T5770] bridge_slave_1: entered allmulticast mode [ 76.476630][ T5770] bridge_slave_1: entered promiscuous mode [ 76.547281][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.556200][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.563411][ T5773] bridge_slave_0: entered allmulticast mode [ 76.571032][ T5773] bridge_slave_0: entered promiscuous mode [ 76.578650][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.586083][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.593255][ T5771] bridge_slave_0: entered allmulticast mode [ 76.602389][ T5771] bridge_slave_0: entered promiscuous mode [ 76.611716][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.622703][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.632581][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.659015][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.672410][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.679874][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.687231][ T5773] bridge_slave_1: entered allmulticast mode [ 76.694111][ T5773] bridge_slave_1: entered promiscuous mode [ 76.700643][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.709713][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.717621][ T5771] bridge_slave_1: entered allmulticast mode [ 76.724986][ T5771] bridge_slave_1: entered promiscuous mode [ 76.740069][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.759698][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.766901][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.793439][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.851108][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.864090][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.876198][ T5770] team0: Port device team_slave_0 added [ 76.884296][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.895144][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.920973][ T5770] team0: Port device team_slave_1 added [ 76.968308][ T5769] hsr_slave_0: entered promiscuous mode [ 76.974686][ T5769] hsr_slave_1: entered promiscuous mode [ 77.012081][ T5773] team0: Port device team_slave_0 added [ 77.019088][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.026849][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.053281][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.066814][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.079307][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.105429][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.119100][ T5771] team0: Port device team_slave_0 added [ 77.137577][ T5773] team0: Port device team_slave_1 added [ 77.158554][ T5771] team0: Port device team_slave_1 added [ 77.218489][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.225875][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.252258][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.270927][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.277954][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.304432][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.336958][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.346413][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.372730][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.395711][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.402705][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.428893][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.445138][ T5770] hsr_slave_0: entered promiscuous mode [ 77.451363][ T5770] hsr_slave_1: entered promiscuous mode [ 77.457643][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.465681][ T5770] Cannot create hsr debugfs directory [ 77.538246][ T5771] hsr_slave_0: entered promiscuous mode [ 77.544664][ T5771] hsr_slave_1: entered promiscuous mode [ 77.550998][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.559395][ T5771] Cannot create hsr debugfs directory [ 77.634597][ T5084] Bluetooth: hci2: command tx timeout [ 77.654230][ T5773] hsr_slave_0: entered promiscuous mode [ 77.660463][ T5773] hsr_slave_1: entered promiscuous mode [ 77.667685][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.675380][ T5773] Cannot create hsr debugfs directory [ 77.714908][ T5084] Bluetooth: hci1: command tx timeout [ 77.715194][ T51] Bluetooth: hci0: command tx timeout [ 77.720859][ T5084] Bluetooth: hci3: command tx timeout [ 77.819567][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.858438][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.868283][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.909903][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.019114][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.035997][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.045632][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.064288][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.148150][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.162887][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.173045][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.183581][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.270934][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.283452][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.296702][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.307894][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.352273][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.383202][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.430623][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.438075][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.452335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.459531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.476884][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.535704][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.560829][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.567988][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.586911][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.594076][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.608668][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.697808][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.719521][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.768144][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.775330][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.799620][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.806734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.846609][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.898117][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.905334][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.950927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.958147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.075695][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.130505][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.240071][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.301721][ T5769] veth0_vlan: entered promiscuous mode [ 79.353751][ T5769] veth1_vlan: entered promiscuous mode [ 79.369607][ T5770] veth0_vlan: entered promiscuous mode [ 79.401585][ T5770] veth1_vlan: entered promiscuous mode [ 79.466578][ T5769] veth0_macvtap: entered promiscuous mode [ 79.483634][ T5769] veth1_macvtap: entered promiscuous mode [ 79.516748][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.531224][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.545284][ T5770] veth0_macvtap: entered promiscuous mode [ 79.561277][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.577300][ T5770] veth1_macvtap: entered promiscuous mode [ 79.604637][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.618866][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.628455][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.638950][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.649444][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.669058][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.680673][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.692524][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.707262][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.718182][ T5084] Bluetooth: hci2: command tx timeout [ 79.726313][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.737354][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.767514][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.776610][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.786433][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.796260][ T51] Bluetooth: hci0: command tx timeout [ 79.801462][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.802087][ T5779] Bluetooth: hci1: command tx timeout [ 79.818228][ T5084] Bluetooth: hci3: command tx timeout [ 79.892142][ T5771] veth0_vlan: entered promiscuous mode [ 79.921826][ T5773] veth0_vlan: entered promiscuous mode [ 79.940517][ T5771] veth1_vlan: entered promiscuous mode [ 80.004753][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.006438][ T5771] veth0_macvtap: entered promiscuous mode [ 80.012812][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.023084][ T5771] veth1_macvtap: entered promiscuous mode [ 80.058297][ T5773] veth1_vlan: entered promiscuous mode [ 80.106558][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.128687][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.140694][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.155777][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.168926][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.179756][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.192563][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.241874][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.252784][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.263186][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.273946][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.286517][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.298435][ T5773] veth0_macvtap: entered promiscuous mode [ 80.323078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.324596][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.341716][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.350722][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.351030][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.370918][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.372458][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389649][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416675][ T5773] veth1_macvtap: entered promiscuous mode [ 80.489987][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.502710][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.512612][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.526728][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.536612][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.547251][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.559053][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.582141][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.602189][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.612677][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.623356][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.633239][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.643997][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.655609][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.694264][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.704984][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.763230][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.793911][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.802890][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.808961][ T5839] Zero length message leads to an empty skb [ 80.836447][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.881988][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.911407][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.090059][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.126575][ T5841] syz.3.5 uses obsolete (PF_INET,SOCK_PACKET) [ 81.138105][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.223607][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.242909][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.804402][ T5084] Bluetooth: hci2: command tx timeout [ 81.876168][ T5084] Bluetooth: hci3: command tx timeout [ 81.881676][ T51] Bluetooth: hci0: command tx timeout [ 81.882222][ T5779] Bluetooth: hci1: command tx timeout [ 82.126627][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.341679][ T5808] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.364993][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.389733][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.413338][ T5808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.459687][ T5808] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.479823][ T5884] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 82.487009][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.494026][ T5884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 82.523892][ T5808] usb 1-1: Product: syz [ 82.543894][ T5808] usb 1-1: Manufacturer: syz [ 82.597068][ T5808] cdc_wdm 1-1:1.0: skipping garbage [ 82.606672][ T5808] cdc_wdm 1-1:1.0: skipping garbage [ 82.620319][ T5808] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 82.863759][ T5834] usb 1-1: USB disconnect, device number 2 [ 83.057683][ T5906] block nbd3: NBD_DISCONNECT [ 83.335046][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 83.874092][ T5779] Bluetooth: hci2: command tx timeout [ 83.954299][ T5084] Bluetooth: hci3: command tx timeout [ 83.960049][ T51] Bluetooth: hci0: command tx timeout [ 83.965902][ T5779] Bluetooth: hci1: command tx timeout [ 84.466412][ T5930] macsec1: entered allmulticast mode [ 84.695925][ T5937] block nbd2: NBD_DISCONNECT [ 85.385911][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.602065][ T5808] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.627756][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.747899][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.892271][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.049533][ T5808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.118833][ T5808] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.141269][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.151279][ T5808] usb 3-1: Product: syz [ 86.156843][ T5808] usb 3-1: Manufacturer: syz [ 86.186400][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 86.191663][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 86.205433][ T5808] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 86.930392][ T23] cfg80211: failed to load regulatory.db [ 87.664106][ T5834] usb 3-1: USB disconnect, device number 2 [ 87.945694][ T6002] syz.1.54[6002]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.965370][ T6002] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 89.409376][ T6038] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 91.729435][ T6078] macsec1: entered allmulticast mode [ 91.841515][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 92.069642][ T6087] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 92.095494][ T6087] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.120980][ T6088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.146341][ T6091] bond_slave_0: entered promiscuous mode [ 92.152394][ T6091] bond_slave_1: entered promiscuous mode [ 92.158282][ T6091] syz_tun: entered promiscuous mode [ 92.165005][ T6091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.176744][ T6091] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 92.213312][ T6093] batadv0: entered promiscuous mode [ 92.240693][ T6093] veth1_to_batadv: entered promiscuous mode [ 92.267100][ T6093] hsr1: entered allmulticast mode [ 92.273457][ T6093] batadv0: entered allmulticast mode [ 92.280038][ T6093] veth1_to_batadv: entered allmulticast mode [ 93.415780][ T6117] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 93.589109][ T6121] ======================================================= [ 93.589109][ T6121] WARNING: The mand mount option has been deprecated and [ 93.589109][ T6121] and is ignored by this kernel. Remove the mand [ 93.589109][ T6121] option from the mount to silence this warning. [ 93.589109][ T6121] ======================================================= [ 101.551838][ T6242] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 101.633341][ T6242] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.731899][ T6243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.977050][ T6263] netlink: 'syz.0.134': attribute type 13 has an invalid length. [ 103.268591][ T6271] --map-set only usable from mangle table [ 103.288598][ T6271] syz_tun: entered allmulticast mode [ 103.348641][ T6270] syz_tun: left allmulticast mode [ 103.706020][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 103.718655][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.141'. [ 104.072210][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.080618][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.409012][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.444716][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.787088][ T6286] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.803525][ T6286] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.815161][ T6286] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.824820][ T6286] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.881719][ T6293] nbd2: detected capacity change from 0 to 63 [ 104.969890][ T5779] block nbd2: Receive control failed (result -104) [ 105.023360][ T6289] netlink: 'syz.0.142': attribute type 10 has an invalid length. [ 105.097485][ T6289] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.133450][ T6290] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.851287][ T6331] netlink: 'syz.0.150': attribute type 13 has an invalid length. [ 105.984903][ T6334] nbd3: detected capacity change from 0 to 63 [ 106.026591][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 106.035741][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 106.044845][ T6335] netlink: 6 bytes leftover after parsing attributes in process `syz.2.153'. [ 106.140245][ T5779] block nbd3: Receive control failed (result -104) [ 106.685122][ T6339] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 106.711105][ T6339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.292613][ T6373] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 108.302722][ T6373] bond1: option mode: unable to set because the bond device is up [ 110.389104][ T6387] macsec1: entered allmulticast mode [ 112.576015][ T6411] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 112.769888][ T6411] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.998389][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.379609][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 114.389086][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 114.398317][ T6442] netlink: 6 bytes leftover after parsing attributes in process `syz.2.181'. [ 114.725236][ T6459] syzkaller0: create flow: hash 2125789445 index 1 [ 115.315821][ T8] syzkaller0: tun_net_xmit 76 [ 115.361790][ T6447] syzkaller0: delete flow: hash 2125789445 index 1 [ 117.028229][ T6482] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 117.398059][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 117.411397][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 117.731228][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.739251][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.095999][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.131714][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.408849][ T6474] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.419737][ T6474] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.428735][ T6474] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.437638][ T6474] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.527337][ T6500] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 118.978337][ T6509] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 120.571028][ T6553] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 120.591302][ T6546] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 120.949712][ T6565] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 121.789871][ T6588] xt_hashlimit: size too large, truncated to 1048576 [ 123.202476][ T6605] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 123.505150][ T6604] syzkaller0: entered promiscuous mode [ 123.511644][ T6604] syzkaller0: entered allmulticast mode [ 125.939921][ T6636] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 126.786554][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.976222][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.989075][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.000701][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.016400][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.031824][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.053544][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.063543][ T9] usb 2-1: Product: syz [ 127.071293][ T9] usb 2-1: Manufacturer: syz [ 127.099529][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 127.104971][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 127.110369][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 127.623106][ T9] usb 2-1: USB disconnect, device number 2 [ 127.773254][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.034451][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.348147][ T6660] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 128.693427][ T6663] syzkaller0: entered promiscuous mode [ 128.699074][ T6663] syzkaller0: entered allmulticast mode [ 128.861854][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.875463][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.898145][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.403474][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.413342][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.430495][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.461148][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.485110][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.493028][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.843947][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.916432][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.039422][ T786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.049330][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.059753][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.070812][ T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.081251][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.097846][ T786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.107160][ T786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.115353][ T786] usb 1-1: Product: syz [ 131.120056][ T786] usb 1-1: Manufacturer: syz [ 131.144646][ T786] cdc_wdm 1-1:1.0: skipping garbage [ 131.149966][ T786] cdc_wdm 1-1:1.0: skipping garbage [ 131.156661][ T786] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 131.298121][ T6670] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 131.398267][ T5774] usb 1-1: USB disconnect, device number 3 [ 131.538604][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 131.755055][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.782969][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.799318][ T6684] bridge_slave_0: entered allmulticast mode [ 131.807322][ T6684] bridge_slave_0: entered promiscuous mode [ 131.816607][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.823751][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.831131][ T6684] bridge_slave_1: entered allmulticast mode [ 131.839809][ T6684] bridge_slave_1: entered promiscuous mode [ 131.876209][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.892065][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.002156][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.056626][ T6684] team0: Port device team_slave_0 added [ 132.083781][ T6684] team0: Port device team_slave_1 added [ 132.191445][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.219614][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.268702][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.316919][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.339558][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.365890][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.374482][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.408897][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.483611][ T6718] syzkaller1: entered promiscuous mode [ 132.492784][ T6718] syzkaller1: entered allmulticast mode [ 132.520062][ T6684] hsr_slave_0: entered promiscuous mode [ 132.530584][ T6684] hsr_slave_1: entered promiscuous mode [ 132.541468][ T6684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.552278][ T6684] Cannot create hsr debugfs directory [ 132.599881][ T5779] Bluetooth: hci4: command tx timeout [ 133.001320][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014463][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084150][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.181931][ T6684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.212704][ T6684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.238739][ T6684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.274717][ T6684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.318512][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.347018][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.371454][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.401046][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.424065][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.437991][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.450471][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.465232][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.480964][ T6726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.508491][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.597871][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.635151][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.642374][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.682538][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.689782][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.167496][ T6737] netlink: 'syz.2.261': attribute type 83 has an invalid length. [ 134.490929][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.674761][ T5779] Bluetooth: hci4: command tx timeout [ 135.129793][ T6684] veth0_vlan: entered promiscuous mode [ 135.174318][ T6684] veth1_vlan: entered promiscuous mode [ 135.233842][ T6684] veth0_macvtap: entered promiscuous mode [ 135.270249][ T1198] IPVS: starting estimator thread 0... [ 135.292483][ T6684] veth1_macvtap: entered promiscuous mode [ 135.326043][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.353525][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.373656][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.384645][ T6769] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.393078][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.405865][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.417367][ T6775] block nbd2: NBD_DISCONNECT [ 135.422086][ T6775] block nbd2: Send disconnect failed -32 [ 135.432759][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.444164][ T6775] block nbd2: shutting down sockets [ 135.464319][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.475930][ T6684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.488568][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.498017][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 135.505859][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 135.514952][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 135.520388][ T6684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.522688][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 135.540383][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 135.541877][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.562553][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.572436][ T5931] Buffer I/O error on dev nbd2, logical block 0, async page read [ 135.582846][ T5931] Buffer I/O error on dev nbd2, logical block 1, async page read [ 135.590954][ T5931] Buffer I/O error on dev nbd2, logical block 2, async page read [ 135.604375][ T5931] Buffer I/O error on dev nbd2, logical block 3, async page read [ 135.613556][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.623128][ T5931] Buffer I/O error on dev nbd2, logical block 0, async page read [ 135.631108][ T5931] Buffer I/O error on dev nbd2, logical block 1, async page read [ 135.641629][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.651226][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.660984][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.670911][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.680797][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 135.690155][ T5762] ldm_validate_partition_table(): Disk read failed. [ 135.697973][ T5931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.699250][ T6684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.708960][ T5762] Dev nbd2: unable to read RDB block 0 [ 135.724372][ T5762] nbd2: unable to read partition table [ 135.739434][ T5762] ldm_validate_partition_table(): Disk read failed. [ 135.747853][ T5762] Dev nbd2: unable to read RDB block 0 [ 135.751058][ T6684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.755212][ T5762] nbd2: unable to read partition table [ 135.782969][ T6684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.793856][ T6684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.062476][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.111704][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.165414][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.183611][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.198225][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 30 seconds [ 136.211228][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 30 seconds [ 136.225154][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 30 seconds [ 136.237195][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 30 seconds [ 136.554156][ T6802] macsec1: entered allmulticast mode [ 136.754893][ T5779] Bluetooth: hci4: command tx timeout [ 137.250765][ T6833] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 137.268285][ T6833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.819966][ T6856] macsec1: entered allmulticast mode [ 137.893135][ T6858] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 137.928172][ T6858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.976906][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.274921][ T1198] net_ratelimit: 1025 callbacks suppressed [ 138.274935][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.773719][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 138.834862][ T5779] Bluetooth: hci4: command tx timeout [ 138.919538][ T6893] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 139.041917][ T6896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.315876][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.422570][ T6921] vlan2: entered allmulticast mode [ 139.434389][ T6921] bond0: entered allmulticast mode [ 139.441241][ T6921] bond_slave_0: entered allmulticast mode [ 139.457601][ T6921] bond_slave_1: entered allmulticast mode [ 139.463388][ T6921] syz_tun: entered allmulticast mode [ 139.493242][ T6926] netlink: 14 bytes leftover after parsing attributes in process `syz.4.329'. [ 139.632644][ T6926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.678863][ T6926] bond_slave_0: left allmulticast mode [ 139.721446][ T6926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.748415][ T6926] bond_slave_1: left allmulticast mode [ 139.821271][ T6941] Bluetooth: MGMT ver 1.22 [ 139.831817][ T6926] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 139.845394][ T6926] syz_tun: left allmulticast mode [ 139.861605][ T6926] bond0 (unregistering): Released all slaves [ 139.889820][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.898815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.060930][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.196414][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.365328][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.603980][ T6964] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 141.354966][ T6980] macsec1: entered allmulticast mode [ 141.396119][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.513338][ T6982] nbd: must specify at least one socket [ 142.382926][ T6997] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 142.434764][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.519433][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 142.528584][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 142.537655][ T6999] netlink: 6 bytes leftover after parsing attributes in process `syz.2.351'. [ 143.165909][ T7006] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 143.235379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.289739][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.385471][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.397785][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.407990][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.430138][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.442954][ T7011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.463206][ T7012] nbd: must specify at least one socket [ 143.475022][ T7010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.485969][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.888501][ T7018] macsec1: entered allmulticast mode [ 143.919233][ T7020] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 143.936266][ T7020] bond1: option mode: unable to set because the bond device is up [ 144.516779][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.256452][ T7031] netlink: 64 bytes leftover after parsing attributes in process `syz.1.368'. [ 145.334675][ T7031] nbd0: detected capacity change from 0 to 2 [ 145.358850][ T5779] block nbd0: Receive control failed (result -104) [ 145.555117][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.813922][ T1198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.034505][ T1198] usb 3-1: Using ep0 maxpacket: 32 [ 146.051205][ T1198] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.065281][ T1198] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 146.087475][ T1198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.109588][ T1198] usb 3-1: Product: syz [ 146.123880][ T1198] usb 3-1: Manufacturer: syz [ 146.129014][ T1198] usb 3-1: SerialNumber: syz [ 146.143225][ T1198] usb 3-1: config 0 descriptor?? [ 146.161151][ T1198] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 146.246506][ T1198] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 146.339479][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.518210][ T7039] nbd: must specify at least one socket [ 147.145075][ T1198] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 147.303896][ T1198] usb 2-1: device descriptor read/64, error -71 [ 147.593901][ T1198] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 147.753937][ T1198] usb 2-1: device descriptor read/64, error -71 [ 147.884188][ T1198] usb usb2-port1: attempt power cycle [ 148.313974][ T1198] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 148.345707][ T1198] usb 2-1: device descriptor read/8, error -71 [ 148.540491][ T5808] usb 3-1: USB disconnect, device number 3 [ 148.644325][ T1198] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.684022][ T5774] net_ratelimit: 4 callbacks suppressed [ 148.684038][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.710324][ T1198] usb 2-1: device descriptor read/8, error -71 [ 148.834455][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.844785][ T1198] usb usb2-port1: unable to enumerate USB device [ 149.724767][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.333957][ T1198] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.533988][ T1198] usb 2-1: Using ep0 maxpacket: 32 [ 150.541088][ T1198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.554490][ T1198] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 150.563750][ T1198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.571858][ T1198] usb 2-1: Product: syz [ 150.576205][ T1198] usb 2-1: Manufacturer: syz [ 150.580849][ T1198] usb 2-1: SerialNumber: syz [ 150.587209][ T1198] usb 2-1: config 0 descriptor?? [ 150.597041][ T1198] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 150.618496][ T1198] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 150.648508][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.764145][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.532858][ T7045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.640781][ T7074] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 151.662117][ T7074] bond1: option mode: unable to set because the bond device is up [ 151.794168][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.876989][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.912049][ T7086] macsec1: entered allmulticast mode [ 152.224474][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 152.399086][ T8] usb 3-1: device descriptor read/64, error -71 [ 152.674284][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 152.847915][ T8] usb 3-1: device descriptor read/64, error -71 [ 152.851201][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.999175][ T786] usb 2-1: USB disconnect, device number 7 [ 153.016181][ T8] usb usb3-port1: attempt power cycle [ 153.475843][ T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 153.517753][ T8] usb 3-1: device descriptor read/8, error -71 [ 153.826019][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 153.876211][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.885067][ T8] usb 3-1: device descriptor read/8, error -71 [ 154.006488][ T8] usb usb3-port1: unable to enumerate USB device [ 154.049225][ T7101] netlink: 'syz.4.396': attribute type 10 has an invalid length. [ 154.058575][ T7104] bond1: option mode: unable to set because the bond device is up [ 154.640693][ T7135] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 154.652204][ T7135] bond1: option mode: unable to set because the bond device is up [ 154.914258][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.922582][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.944035][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.173965][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 155.181201][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.206008][ T5808] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 155.221668][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.230277][ T5808] usb 5-1: Product: syz [ 155.240008][ T5808] usb 5-1: Manufacturer: syz [ 155.244756][ T5808] usb 5-1: SerialNumber: syz [ 155.251856][ T5808] usb 5-1: config 0 descriptor?? [ 155.267346][ T5808] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 155.336075][ T5808] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 155.373517][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.557244][ T7157] syzkaller0: entered promiscuous mode [ 155.563451][ T7157] syzkaller0: entered allmulticast mode [ 155.570972][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 155.580019][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 155.588964][ T7154] netlink: 6 bytes leftover after parsing attributes in process `syz.1.413'. [ 155.956068][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.036518][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.044678][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.709749][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.997234][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.680093][ T8] usb 5-1: USB disconnect, device number 2 [ 157.693899][ T786] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 157.865993][ T7185] nbd1: detected capacity change from 0 to 63 [ 157.882670][ T24] block nbd1: Send control failed (result -32) [ 157.889764][ T5779] block nbd1: Receive control failed (result -32) [ 157.893912][ T786] usb 1-1: device descriptor read/64, error -71 [ 157.897351][ T24] block nbd1: Request send failed, requeueing [ 157.912630][ T5933] block nbd1: Dead connection, failed to find a fallback [ 157.922731][ T5933] block nbd1: shutting down sockets [ 157.928281][ T5933] blk_print_req_error: 115 callbacks suppressed [ 157.928294][ T5933] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 157.944653][ T5933] buffer_io_error: 138 callbacks suppressed [ 157.944666][ T5933] Buffer I/O error on dev nbd1, logical block 0, async page read [ 157.959021][ T5933] Buffer I/O error on dev nbd1, logical block 1, async page read [ 157.970676][ T5933] Buffer I/O error on dev nbd1, logical block 2, async page read [ 157.978562][ T5933] Buffer I/O error on dev nbd1, logical block 3, async page read [ 157.987711][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 157.997004][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 158.004827][ T24] Buffer I/O error on dev nbd1, logical block 1, async page read [ 158.012647][ T24] Buffer I/O error on dev nbd1, logical block 2, async page read [ 158.021228][ T24] Buffer I/O error on dev nbd1, logical block 3, async page read [ 158.029374][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.038695][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 158.046522][ T24] Buffer I/O error on dev nbd1, logical block 1, async page read [ 158.054648][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.064956][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.074384][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.083751][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.093171][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.102791][ T5760] ldm_validate_partition_table(): Disk read failed. [ 158.109958][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.159758][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.169424][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 158.179357][ T5760] Dev nbd1: unable to read RDB block 0 [ 158.187457][ T5760] nbd1: unable to read partition table [ 158.200328][ T5760] ldm_validate_partition_table(): Disk read failed. [ 158.209964][ T5760] Dev nbd1: unable to read RDB block 0 [ 158.222829][ T5760] nbd1: unable to read partition table [ 158.269129][ T786] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 158.383931][ T7194] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 158.391715][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.427'. [ 158.443922][ T786] usb 1-1: device descriptor read/64, error -71 [ 158.564401][ T786] usb usb1-port1: attempt power cycle [ 158.771531][ T7214] syzkaller0: entered promiscuous mode [ 158.777417][ T7214] syzkaller0: entered allmulticast mode [ 159.004207][ T786] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 159.037818][ T7224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.439'. [ 159.054759][ T786] usb 1-1: device descriptor read/8, error -71 [ 159.067710][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 159.077952][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.144163][ T5808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.154940][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.348261][ T5808] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.353950][ T786] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 159.374156][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.387023][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.400771][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.414562][ T786] usb 1-1: device descriptor read/8, error -71 [ 159.416543][ T5808] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.435767][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.455621][ T5808] usb 2-1: Product: syz [ 159.462910][ T5808] usb 2-1: Manufacturer: syz [ 159.477316][ T5808] cdc_wdm 2-1:1.0: skipping garbage [ 159.494528][ T5808] cdc_wdm 2-1:1.0: skipping garbage [ 159.500034][ T5808] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 159.545235][ T786] usb usb1-port1: unable to enumerate USB device [ 159.553487][ T7236] nbd: must specify at least one socket [ 159.688627][ T786] usb 2-1: USB disconnect, device number 8 [ 160.155141][ T7257] nbd: must specify at least one socket [ 160.194389][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.390891][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'. [ 160.715211][ T7275] nbd: must specify at least one socket [ 161.074099][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.125945][ T7298] xt_TCPMSS: Only works on TCP SYN packets [ 161.234701][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.265665][ T786] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.280623][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.302634][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.311779][ T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.314192][ T5774] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 161.343119][ T786] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.365740][ T786] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.381898][ T786] usb 2-1: Product: syz [ 161.394093][ T786] usb 2-1: Manufacturer: syz [ 161.412905][ T786] cdc_wdm 2-1:1.0: skipping garbage [ 161.419370][ T786] cdc_wdm 2-1:1.0: skipping garbage [ 161.425327][ T786] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 161.495371][ T5774] usb 1-1: device descriptor read/64, error -71 [ 161.571935][ T7313] nbd: must specify at least one socket [ 161.623667][ T786] usb 2-1: USB disconnect, device number 9 [ 161.763998][ T5774] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 161.810415][ T7322] syzkaller0: entered promiscuous mode [ 161.816003][ T7322] syzkaller0: entered allmulticast mode [ 161.923955][ T5774] usb 1-1: device descriptor read/64, error -71 [ 162.046995][ T5774] usb usb1-port1: attempt power cycle [ 162.120835][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.274803][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.473949][ T5774] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 162.514941][ T786] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.671247][ T5774] usb 1-1: device descriptor read/8, error -71 [ 162.724377][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 162.744246][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.788345][ T786] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 162.812348][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.840867][ T786] usb 2-1: Product: syz [ 162.854762][ T786] usb 2-1: Manufacturer: syz [ 162.868097][ T786] usb 2-1: SerialNumber: syz [ 162.894456][ T786] usb 2-1: config 0 descriptor?? [ 162.912781][ T786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 162.988207][ T786] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 163.087757][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.194032][ T5774] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 163.234522][ T5774] usb 1-1: device descriptor read/8, error -71 [ 163.315909][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.356541][ T5774] usb usb1-port1: unable to enumerate USB device [ 164.300404][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.309503][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.318781][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.343480][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.355870][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.364064][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.388013][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.402654][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.421345][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.446830][ T7407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.921916][ T7426] macsec1: entered allmulticast mode [ 165.257342][ T5808] usb 2-1: USB disconnect, device number 10 [ 165.337808][ T7435] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 165.363449][ T7435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.968349][ T7461] nbd: must specify at least one socket [ 166.370953][ T24] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 60 seconds [ 166.382950][ T24] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 60 seconds [ 166.394748][ T24] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 60 seconds [ 166.406579][ T24] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 60 seconds [ 166.707830][ T7478] macsec1: entered allmulticast mode [ 167.046503][ T7491] nbd: must specify at least one socket [ 167.053353][ T7491] nbd: must specify an index to disconnect [ 167.399178][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 167.758691][ T7516] nbd: must specify at least one socket [ 167.904690][ T7516] nbd: must specify an index to disconnect [ 167.949097][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 168.002213][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.539'. [ 168.011463][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.539'. [ 168.020604][ T7523] netlink: 6 bytes leftover after parsing attributes in process `syz.4.539'. [ 169.287961][ T7545] nbd: must specify at least one socket [ 169.307001][ T7545] nbd: must specify an index to disconnect [ 169.730161][ T7556] syzkaller0: entered promiscuous mode [ 169.740571][ T7556] syzkaller0: entered allmulticast mode [ 170.223937][ T5809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.426160][ T5809] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.447285][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.461235][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.470420][ T5809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.484728][ T5809] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.494182][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.502387][ T5809] usb 3-1: Product: syz [ 170.506721][ T5809] usb 3-1: Manufacturer: syz [ 170.518840][ T5809] cdc_wdm 3-1:1.0: skipping garbage [ 170.530349][ T5809] cdc_wdm 3-1:1.0: skipping garbage [ 170.536465][ T5809] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 170.739033][ T5809] usb 3-1: USB disconnect, device number 8 [ 170.890980][ T7595] syzkaller0: entered promiscuous mode [ 170.897098][ T7595] syzkaller0: entered allmulticast mode [ 171.838098][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 172.246357][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 172.256265][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 172.265306][ T7636] netlink: 6 bytes leftover after parsing attributes in process `syz.2.577'. [ 172.324328][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.324743][ T7640] syzkaller0: entered promiscuous mode [ 172.337688][ T7640] syzkaller0: entered allmulticast mode [ 172.515833][ T27] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.524983][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.535953][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.545405][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.566217][ T27] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.578686][ T27] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.587308][ T27] usb 5-1: Product: syz [ 172.592047][ T27] usb 5-1: Manufacturer: syz [ 172.603768][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 172.621785][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 172.629663][ T27] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 173.166747][ T27] usb 5-1: USB disconnect, device number 3 [ 175.130933][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'. [ 175.832952][ T7664] syzkaller0: entered promiscuous mode [ 175.854454][ T7664] syzkaller0: entered allmulticast mode [ 175.894354][ T5931] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 30 seconds [ 176.069260][ T7671] macsec1: entered allmulticast mode [ 176.472995][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 176.482013][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 176.491112][ T7679] netlink: 6 bytes leftover after parsing attributes in process `syz.4.595'. [ 176.574478][ T786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 176.653480][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 178.688640][ T786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.699532][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.719501][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.734226][ T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.746152][ T786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.765771][ T786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.774127][ T786] usb 1-1: Product: syz [ 178.778392][ T786] usb 1-1: Manufacturer: syz [ 178.789013][ T786] cdc_wdm 1-1:1.0: skipping garbage [ 178.798846][ T786] cdc_wdm 1-1:1.0: skipping garbage [ 178.804411][ T786] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 179.000394][ T786] usb 1-1: USB disconnect, device number 12 [ 179.090928][ T7696] syzkaller0: entered promiscuous mode [ 179.096959][ T7696] syzkaller0: entered allmulticast mode [ 179.271256][ T7698] net_ratelimit: 1027 callbacks suppressed [ 179.271270][ T7698] IPVS: lc: FWM 3 0x00000003 - no destination available [ 179.284599][ T786] IPVS: starting estimator thread 0... [ 179.443923][ T7699] IPVS: using max 23 ests per chain, 55200 per kthread [ 179.544692][ T7703] syzkaller0: entered promiscuous mode [ 179.554643][ T7703] syzkaller0: entered allmulticast mode [ 180.500296][ T7701] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 180.802928][ T7737] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 184.546719][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 184.571992][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 186.707767][ T7808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.629'. [ 187.103513][ T7810] (null): rxe_set_mtu: Set mtu to 4096 [ 187.843925][ T7805] syzkaller0: entered promiscuous mode [ 187.865166][ T7805] syzkaller0: entered allmulticast mode [ 189.633362][ T7838] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 189.913527][ T7810] lo speed is unknown, defaulting to 1000 [ 189.941563][ T7810] lo speed is unknown, defaulting to 1000 [ 189.975163][ T7810] lo speed is unknown, defaulting to 1000 [ 190.336843][ T7810] infiniband syz0: set active [ 190.352651][ T7810] infiniband syz0: added lo [ 190.361050][ T7810] syz0: rxe_create_cq: returned err = -12 [ 190.378210][ T7810] infiniband syz0: Couldn't create ib_mad CQ [ 190.414293][ T7810] infiniband syz0: Couldn't open port 1 [ 190.500228][ T7810] RDS/IB: syz0: added [ 190.522092][ T7810] smc: adding ib device syz0 with port count 1 [ 190.545120][ T7810] smc: ib device syz0 port 1 has pnetid [ 190.622068][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.629928][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.665684][ T7847] bond_slave_0: left promiscuous mode [ 190.671548][ T7847] bond_slave_1: left promiscuous mode [ 190.785641][ T7862] netlink: 'syz.0.647': attribute type 3 has an invalid length. [ 190.819208][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.647'. [ 191.159591][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.200056][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.499664][ T7847] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.509724][ T7847] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.518907][ T7847] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.527861][ T7847] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.639488][ T7849] netlink: 'syz.1.644': attribute type 13 has an invalid length. [ 191.647360][ T7849] netlink: 'syz.1.644': attribute type 17 has an invalid length. [ 191.678950][ T7849] syz_tun: left promiscuous mode [ 191.701388][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.711128][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.721762][ T7849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.739590][ T786] lo speed is unknown, defaulting to 1000 [ 191.852419][ T5833] lo speed is unknown, defaulting to 1000 [ 191.883642][ T7810] lo speed is unknown, defaulting to 1000 [ 192.149661][ T7884] syzkaller0: entered promiscuous mode [ 192.156298][ T7884] syzkaller0: entered allmulticast mode [ 192.181073][ T7810] lo speed is unknown, defaulting to 1000 [ 193.671017][ T7810] lo speed is unknown, defaulting to 1000 [ 194.461592][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474101][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.541579][ T7907] macsec1: entered allmulticast mode [ 195.071505][ T7810] lo speed is unknown, defaulting to 1000 [ 197.027822][ T5933] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 90 seconds [ 197.039775][ T5933] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 90 seconds [ 197.050900][ T5933] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 90 seconds [ 197.062031][ T5933] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 90 seconds [ 197.347745][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.355521][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.667982][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.688359][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.994799][ T7914] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.003693][ T7914] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.013245][ T7914] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.022811][ T7914] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.207104][ T7810] lo speed is unknown, defaulting to 1000 [ 198.384626][ T7938] syzkaller0: entered promiscuous mode [ 198.405118][ T7938] syzkaller0: entered allmulticast mode [ 198.525256][ T7940] syzkaller0: entered promiscuous mode [ 198.544199][ T7940] syzkaller0: entered allmulticast mode [ 201.642859][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.642913][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 201.649227][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 201.656408][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 201.829660][ T7973] syzkaller0: entered promiscuous mode [ 201.836143][ T7973] syzkaller0: entered allmulticast mode [ 202.040776][ T7977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.686'. [ 202.057822][ T7977] netlink: 388 bytes leftover after parsing attributes in process `syz.1.686'. [ 202.083988][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 202.113715][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 202.992211][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.691'. [ 203.187428][ T7998] netlink: 260 bytes leftover after parsing attributes in process `syz.4.694'. [ 203.848516][ T8016] syzkaller0: entered promiscuous mode [ 203.857291][ T8016] syzkaller0: entered allmulticast mode [ 204.018963][ T8024] syzkaller0: entered promiscuous mode [ 204.029481][ T8024] syzkaller0: entered allmulticast mode [ 205.229143][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 205.957317][ T5931] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 60 seconds [ 207.182847][ T8077] syzkaller0: entered promiscuous mode [ 207.214292][ T8077] syzkaller0: entered allmulticast mode [ 207.514174][ T7878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.734025][ T7878] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.761415][ T7878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.806224][ T7878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.842885][ T7878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.902497][ T7878] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.934586][ T7878] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.969725][ T7878] usb 3-1: Product: syz [ 207.997641][ T7878] usb 3-1: Manufacturer: syz [ 208.043628][ T7878] cdc_wdm 3-1:1.0: skipping garbage [ 208.084186][ T7878] cdc_wdm 3-1:1.0: skipping garbage [ 208.089523][ T7878] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 208.281279][ T7878] usb 3-1: USB disconnect, device number 9 [ 208.637495][ T8106] syzkaller0: entered promiscuous mode [ 208.642997][ T8106] syzkaller0: entered allmulticast mode [ 211.344305][ T8154] netlink: 56 bytes leftover after parsing attributes in process `syz.2.734'. [ 211.499633][ T8160] x_tables: duplicate underflow at hook 1 [ 211.724255][ T5774] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.938987][ T5774] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.958123][ T5774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.993998][ T5774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.013893][ T5774] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.039806][ T5774] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.056392][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 212.066668][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.075312][ T5774] usb 1-1: Product: syz [ 212.079648][ T5774] usb 1-1: Manufacturer: syz [ 212.092241][ T5774] cdc_wdm 1-1:1.0: skipping garbage [ 212.098710][ T5774] cdc_wdm 1-1:1.0: skipping garbage [ 212.105159][ T5774] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 212.238446][ T8187] x_tables: duplicate underflow at hook 1 [ 212.344948][ T5774] usb 1-1: USB disconnect, device number 13 [ 212.661907][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 212.983190][ T8231] x_tables: duplicate underflow at hook 1 [ 213.358452][ T7925] syzkaller0: tun_net_xmit 76 [ 213.623479][ T8255] vlan2: entered promiscuous mode [ 213.629131][ T8255] bond0: entered promiscuous mode [ 213.635965][ T8255] bond_slave_0: entered promiscuous mode [ 213.641868][ T8255] bond_slave_1: entered promiscuous mode [ 213.648222][ T8255] syz_tun: entered promiscuous mode [ 213.764235][ T7925] syzkaller0: tun_net_xmit 76 [ 213.962228][ T8264] 9pnet_fd: Insufficient options for proto=fd [ 215.705610][ T8215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.335988][ T7878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 217.527587][ T7878] usb 2-1: Using ep0 maxpacket: 32 [ 217.536806][ T7878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.550027][ T7878] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 217.559852][ T7878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.568335][ T7878] usb 2-1: Product: syz [ 217.572676][ T7878] usb 2-1: Manufacturer: syz [ 217.577488][ T7878] usb 2-1: SerialNumber: syz [ 217.592199][ T7878] usb 2-1: config 0 descriptor?? [ 217.608554][ T7878] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 217.661985][ T7878] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 217.673557][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.400517][ T8281] syzkaller0: entered promiscuous mode [ 218.410693][ T8281] syzkaller0: entered allmulticast mode [ 219.944594][ T8297] 9pnet_fd: Insufficient options for proto=fd [ 220.371552][ T6497] usb 2-1: USB disconnect, device number 11 [ 222.956607][ T8285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.300419][ T8313] syzkaller0: entered promiscuous mode [ 223.306553][ T8313] syzkaller0: entered allmulticast mode [ 223.662118][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.801'. [ 224.277291][ T1074] syzkaller0: tun_net_xmit 76 [ 224.346724][ T7877] syzkaller0: tun_net_xmit 76 [ 224.367158][ T1074] syzkaller0: tun_net_xmit 48 [ 224.405818][ T7877] syzkaller0: tun_net_xmit 76 [ 227.078129][ T5933] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 120 seconds [ 227.089137][ T5933] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 120 seconds [ 227.100329][ T5933] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 120 seconds [ 227.111584][ T5933] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 120 seconds [ 229.289419][ T8341] infiniband syz0: set down [ 229.440482][ T8333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.695639][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.703329][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.183190][ T8344] Set syz1 is full, maxelem 65536 reached [ 230.289670][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.354642][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.630535][ T8341] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.639917][ T8341] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.649206][ T8341] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.658206][ T8341] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.741686][ T8342] netlink: 'syz.4.806': attribute type 13 has an invalid length. [ 230.749522][ T8342] netlink: 'syz.4.806': attribute type 17 has an invalid length. [ 230.759124][ T8342] infiniband syz0: set active [ 230.764378][ T8342] infiniband syz0: set active [ 230.771806][ T8342] infiniband syz0: set active [ 230.812883][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.822619][ T8342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.844471][ T6497] lo speed is unknown, defaulting to 1000 [ 230.850327][ T23] lo speed is unknown, defaulting to 1000 [ 230.856628][ T8348] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 230.974624][ T6497] lo speed is unknown, defaulting to 1000 [ 231.019671][ T5774] lo speed is unknown, defaulting to 1000 [ 231.027163][ T27] lo speed is unknown, defaulting to 1000 [ 231.039705][ T8374] warning: `syz.2.813' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.141910][ T8380] Bluetooth: MGMT ver 1.22 [ 231.292076][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 231.301460][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.310403][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.024935][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 232.210135][ T8403] syzkaller0: entered promiscuous mode [ 232.216649][ T8403] syzkaller0: entered allmulticast mode [ 232.464599][ T1141] syzkaller0: tun_net_xmit 76 [ 232.469584][ T1141] syzkaller0: tun_net_xmit 48 [ 232.494319][ T6497] syzkaller0: tun_net_xmit 76 [ 232.651438][ T8419] Bluetooth: MGMT ver 1.22 [ 232.664004][ T5774] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 232.866819][ T5774] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 232.875433][ T5774] usb 1-1: config 0 has no interface number 0 [ 232.881770][ T5774] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.900016][ T5774] usb 1-1: config 0 interface 41 has no altsetting 0 [ 232.930925][ T5774] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 232.947762][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.964092][ T5774] usb 1-1: Product: syz [ 232.976516][ T5774] usb 1-1: Manufacturer: syz [ 232.988801][ T5774] usb 1-1: SerialNumber: syz [ 233.004952][ T5774] usb 1-1: config 0 descriptor?? [ 233.022401][ T5774] CoreChips: probe of 1-1:0.41 failed with error -22 [ 234.990762][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 235.095710][ T8433] syzkaller0: entered promiscuous mode [ 235.101520][ T8433] syzkaller0: entered allmulticast mode [ 235.362753][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 235.439735][ T5774] usb 1-1: USB disconnect, device number 14 [ 235.534030][ T7925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.745718][ T7925] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.765466][ T7925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.804041][ T7925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.819501][ T7925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.845976][ T7925] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.865234][ T7925] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.873283][ T7925] usb 3-1: Product: syz [ 235.883899][ T7925] usb 3-1: Manufacturer: syz [ 235.898959][ T7925] cdc_wdm 3-1:1.0: skipping garbage [ 235.914464][ T7925] cdc_wdm 3-1:1.0: skipping garbage [ 235.925141][ T7925] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 236.044023][ T5931] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 90 seconds [ 236.138317][ T6497] usb 3-1: USB disconnect, device number 10 [ 236.279893][ T8459] syzkaller0: entered promiscuous mode [ 236.291181][ T8459] syzkaller0: entered allmulticast mode [ 236.368320][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 242.304911][ T8548] syzkaller0: entered promiscuous mode [ 242.311657][ T8548] syzkaller0: entered allmulticast mode [ 242.607818][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 242.624063][ T7925] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 242.815679][ T7925] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.825717][ T7925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.846406][ T7925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.864858][ T7925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.887252][ T7925] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.903940][ T7925] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.914101][ T7925] usb 3-1: Product: syz [ 242.921671][ T7925] usb 3-1: Manufacturer: syz [ 242.939873][ T7925] cdc_wdm 3-1:1.0: skipping garbage [ 242.949751][ T7925] cdc_wdm 3-1:1.0: skipping garbage [ 242.966026][ T7925] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 243.034545][ T8564] syzkaller0: entered promiscuous mode [ 243.047271][ T8564] syzkaller0: entered allmulticast mode [ 243.156069][ T7925] usb 3-1: USB disconnect, device number 11 [ 243.545471][ T8573] syzkaller0: entered promiscuous mode [ 243.553494][ T8573] syzkaller0: entered allmulticast mode [ 243.975665][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 245.204552][ T8578] syzkaller0: entered promiscuous mode [ 245.210089][ T8578] syzkaller0: entered allmulticast mode [ 246.595585][ T6497] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.795936][ T6497] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.808749][ T6497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.819165][ T6497] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.838867][ T6497] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.850657][ T6497] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.864476][ T6497] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.872503][ T6497] usb 3-1: Product: syz [ 246.880207][ T6497] usb 3-1: Manufacturer: syz [ 246.909579][ T6497] cdc_wdm 3-1:1.0: skipping garbage [ 246.919300][ T6497] cdc_wdm 3-1:1.0: skipping garbage [ 246.934032][ T6497] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 247.091165][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 247.146822][ T5774] usb 3-1: USB disconnect, device number 12 [ 247.223353][ T8612] syzkaller0: entered promiscuous mode [ 247.233304][ T8612] syzkaller0: entered allmulticast mode [ 247.295978][ T8618] 9pnet_fd: Insufficient options for proto=fd [ 251.986967][ T8655] lo speed is unknown, defaulting to 1000 [ 251.988410][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 252.165040][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ed50c00: rx timeout, send abort [ 252.666016][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fbfc800: rx timeout, send abort [ 252.674599][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ed50c00: abort rx timeout. Force session deactivation [ 252.906169][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'. [ 252.968854][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 252.981568][ T8676] syzkaller0: entered promiscuous mode [ 252.987559][ T8676] syzkaller0: entered allmulticast mode [ 253.174341][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fbfc800: abort rx timeout. Force session deactivation [ 254.956361][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 255.887279][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893620][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.642904][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 256.696387][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'. [ 256.976430][ T8733] syzkaller0: entered promiscuous mode [ 256.982093][ T8733] syzkaller0: entered allmulticast mode [ 257.055180][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'. [ 257.174873][ T5933] block nbd3: Possible stuck request ffff888021e70000: control (read@0,1024B). Runtime 150 seconds [ 257.190440][ T5933] block nbd3: Possible stuck request ffff888021e70200: control (read@1024,1024B). Runtime 150 seconds [ 257.201816][ T5933] block nbd3: Possible stuck request ffff888021e70400: control (read@2048,1024B). Runtime 150 seconds [ 257.213125][ T5933] block nbd3: Possible stuck request ffff888021e70600: control (read@3072,1024B). Runtime 150 seconds [ 259.140365][ T8771] syzkaller0: entered promiscuous mode [ 259.151129][ T8771] syzkaller0: entered allmulticast mode [ 259.211036][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.931'. [ 259.405738][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 259.454216][ T8789] syzkaller0: entered promiscuous mode [ 259.459863][ T8789] syzkaller0: entered allmulticast mode [ 259.869763][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.942'. [ 260.153140][ T8817] syzkaller0: entered promiscuous mode [ 260.160207][ T8817] syzkaller0: entered allmulticast mode [ 260.223697][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803181b000: rx timeout, send abort [ 260.308109][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 260.528962][ T8832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.956'. [ 260.723900][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880257ebc00: rx timeout, send abort [ 260.726575][ T8840] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 260.732222][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803181b000: abort rx timeout. Force session deactivation [ 261.232163][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880257ebc00: abort rx timeout. Force session deactivation [ 261.410490][ T8848] syzkaller0: entered promiscuous mode [ 261.419441][ T8848] syzkaller0: entered allmulticast mode [ 261.570504][ T8854] lo speed is unknown, defaulting to 1000 [ 261.643220][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 261.921394][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 262.371539][ T8883] syzkaller0: entered promiscuous mode [ 262.378637][ T8883] syzkaller0: entered allmulticast mode [ 262.769254][ T8904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.825931][ T8904] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 262.832235][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 263.254109][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 263.301097][ T8913] syzkaller0: entered promiscuous mode [ 263.329013][ T8913] syzkaller0: entered allmulticast mode [ 263.441741][ T8918] syzkaller0: entered promiscuous mode [ 263.448111][ T8918] syzkaller0: entered allmulticast mode [ 263.683938][ T6497] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.802112][ T8938] syzkaller0: entered promiscuous mode [ 263.809035][ T7925] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 263.814694][ T8938] syzkaller0: entered allmulticast mode [ 263.905483][ T6497] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.914365][ T8940] syzkaller0: entered promiscuous mode [ 263.914387][ T8940] syzkaller0: entered allmulticast mode [ 263.925913][ T6497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.937459][ T6497] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.946803][ T6497] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.978836][ T6497] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.992640][ T6497] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.003741][ T6497] usb 3-1: Product: syz [ 264.016113][ T6497] usb 3-1: Manufacturer: syz [ 264.031723][ T7925] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 264.038486][ T6497] cdc_wdm 3-1:1.0: skipping garbage [ 264.047779][ T7925] usb 2-1: config 0 has no interface number 0 [ 264.048803][ T6497] cdc_wdm 3-1:1.0: skipping garbage [ 264.054808][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'. [ 264.060322][ T6497] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 264.068742][ T7925] usb 2-1: config 0 interface 41 has no altsetting 0 [ 264.095732][ T7925] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 264.116665][ T7925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.125679][ T7925] usb 2-1: Product: syz [ 264.129887][ T7925] usb 2-1: Manufacturer: syz [ 264.136868][ T7925] usb 2-1: SerialNumber: syz [ 264.149934][ T7925] usb 2-1: config 0 descriptor?? [ 264.198449][ T8944] syzkaller0: entered promiscuous mode [ 264.204353][ T8944] syzkaller0: entered allmulticast mode [ 264.329076][ T8946] syzkaller0: entered promiscuous mode [ 264.329706][ T5833] usb 3-1: USB disconnect, device number 13 [ 264.334936][ T8946] syzkaller0: entered allmulticast mode [ 264.770901][ T7925] CoreChips: probe of 2-1:0.41 failed with error -32 [ 264.782513][ T8961] syzkaller0: entered promiscuous mode [ 264.795316][ T8961] syzkaller0: entered allmulticast mode [ 264.805776][ T8963] syzkaller0: entered promiscuous mode [ 264.811312][ T8963] syzkaller0: entered allmulticast mode [ 264.929078][ T8967] syzkaller0: entered promiscuous mode [ 264.935002][ T8967] syzkaller0: entered allmulticast mode [ 265.128998][ T8969] syzkaller0: entered promiscuous mode [ 265.148864][ T8969] syzkaller0: entered allmulticast mode [ 266.154901][ T5931] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 120 seconds [ 267.336875][ T8988] block nbd0: Unsupported socket: should be TCP or UNIX. [ 268.666451][ T6497] usb 2-1: USB disconnect, device number 12 [ 268.740954][ T8997] syzkaller0: entered promiscuous mode [ 268.747467][ T8997] syzkaller0: entered allmulticast mode [ 268.914308][ T786] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.101932][ T9003] syzkaller0: entered promiscuous mode [ 269.112777][ T9003] syzkaller0: entered allmulticast mode [ 269.120859][ T786] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.132939][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.153906][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.162952][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.193681][ T786] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.212293][ T786] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.220517][ T786] usb 3-1: Product: syz [ 269.225025][ T786] usb 3-1: Manufacturer: syz [ 269.242635][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 269.252001][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 269.257827][ T786] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 269.329071][ T9007] syzkaller0: entered promiscuous mode [ 269.334638][ T9007] syzkaller0: entered allmulticast mode [ 270.825013][ T6497] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 271.012985][ T27] usb 3-1: USB disconnect, device number 14 [ 271.026346][ T6497] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.037164][ T6497] usb 1-1: config 0 has no interface number 0 [ 271.044422][ T6497] usb 1-1: config 0 interface 41 has no altsetting 0 [ 271.064039][ T6497] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.079090][ T6497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.087520][ T6497] usb 1-1: Product: syz [ 271.091772][ T6497] usb 1-1: Manufacturer: syz [ 271.100085][ T6497] usb 1-1: SerialNumber: syz [ 271.107933][ T6497] usb 1-1: config 0 descriptor?? [ 271.442942][ T9036] infiniband syz0: set down [ 271.720150][ T6497] CoreChips: probe of 1-1:0.41 failed with error -32 [ 271.789947][ T5774] lo speed is unknown, defaulting to 1000 [ 271.797311][ T5774] lo speed is unknown, defaulting to 1000 [ 271.862337][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1037'. [ 271.982196][ T9051] syzkaller0: entered promiscuous mode [ 271.987807][ T9051] syzkaller0: entered allmulticast mode [ 274.166619][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1046'. [ 274.253013][ T786] usb 1-1: USB disconnect, device number 15 [ 274.508965][ T9110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.356625][ T9115] syzkaller0: entered promiscuous mode [ 275.362128][ T9115] syzkaller0: entered allmulticast mode [ 276.980788][ T9088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.994218][ T29] INFO: task syz.3.186:6464 blocked for more than 143 seconds. [ 277.022747][ T29] Not tainted syzkaller #0 [ 277.036209][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.055274][ T29] task:syz.3.186 state:D stack:27176 pid:6464 ppid:5770 flags:0x00004004 [ 277.065105][ T29] Call Trace: [ 277.068488][ T29] [ 277.079955][ T29] __schedule+0x1553/0x45a0 [ 277.091693][ T29] ? asan.module_dtor+0x20/0x20 [ 277.096905][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 277.101659][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 277.110058][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 277.116359][ T29] schedule+0xbd/0x170 [ 277.120524][ T29] schedule_preempt_disabled+0x13/0x20 [ 277.126248][ T29] __mutex_lock+0x6a9/0xcc0 [ 277.130854][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 277.135666][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 277.140810][ T29] ? mutex_lock_nested+0x20/0x20 [ 277.145883][ T29] ? iput+0x343/0x920 [ 277.149901][ T29] ? ilookup+0x1c4/0x200 [ 277.161198][ T29] ? disk_block_events+0xa7/0x120 [ 277.168025][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 277.173299][ T29] blkdev_get_by_dev+0x121/0x600 [ 277.183690][ T29] blkdev_open+0x152/0x360 [ 277.189681][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 277.199244][ T29] do_dentry_open+0x8c6/0x1500 [ 277.204775][ T29] path_openat+0x27f1/0x3230 [ 277.209768][ T29] ? do_sys_openat2+0xda/0x1d0 [ 277.222170][ T29] ? verify_lock_unused+0x140/0x140 [ 277.228037][ T29] ? do_filp_open+0x430/0x430 [ 277.233004][ T29] ? __virt_addr_valid+0x18c/0x540 [ 277.250566][ T29] do_filp_open+0x1f5/0x430 [ 277.258573][ T29] ? vfs_tmpfile+0x490/0x490 [ 277.263616][ T29] ? _raw_spin_unlock+0x28/0x40 [ 277.271781][ T29] ? alloc_fd+0x58f/0x630 [ 277.291779][ T29] do_sys_openat2+0x134/0x1d0 [ 277.297402][ T29] ? do_sys_open+0xe0/0xe0 [ 277.302166][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 277.315084][ T29] ? lock_chain_count+0x20/0x20 [ 277.320240][ T29] ? lock_chain_count+0x20/0x20 [ 277.330299][ T29] __x64_sys_openat+0x139/0x160 [ 277.336047][ T29] do_syscall_64+0x55/0xb0 [ 277.340747][ T29] ? clear_bhb_loop+0x40/0x90 [ 277.350816][ T29] ? clear_bhb_loop+0x40/0x90 [ 277.356295][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.362463][ T29] RIP: 0033:0x7f546ff5d68e [ 277.385867][ T29] RSP: 002b:00007f546e1d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.398935][ T29] RAX: ffffffffffffffda RBX: 00007f546e1d56c0 RCX: 00007f546ff5d68e [ 277.411012][ T29] RDX: 0000000000000001 RSI: 00007f546e1d4c00 RDI: ffffffffffffff9c [ 277.426367][ T29] RBP: 00007f546e1d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 277.438422][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 277.448539][ T29] R13: 00007f5470216128 R14: 00007f5470216090 R15: 00007ffdd8097ad8 [ 277.460822][ T29] [ 277.514515][ T29] [ 277.514515][ T29] Showing all locks held in the system: [ 277.522688][ T29] 1 lock held by khungtaskd/29: [ 277.533001][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 277.550805][ T29] 2 locks held by getty/5528: [ 277.556144][ T29] #0: ffff8880319da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.572045][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 277.582820][ T29] 1 lock held by udevd/5762: [ 277.592156][ T29] #0: ffff8881417df4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 277.603027][ T29] 1 lock held by udevd/5764: [ 277.613073][ T29] #0: ffff888021dcb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 277.628847][ T29] 3 locks held by kworker/0:2H/5931: [ 277.635273][ T29] 1 lock held by syz.3.186/6464: [ 277.640490][ T29] #0: ffff888021dcb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 277.656026][ T29] 1 lock held by syz.0.1054/9118: [ 277.661501][ T29] #0: ffffffff8d137a00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 277.676814][ T29] [ 277.679303][ T29] ============================================= [ 277.679303][ T29] [ 277.730823][ T29] NMI backtrace for cpu 1 [ 277.735239][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 277.742454][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.752521][ T29] Call Trace: [ 277.755813][ T29] [ 277.758751][ T29] dump_stack_lvl+0x18c/0x250 [ 277.763471][ T29] ? show_regs_print_info+0x20/0x20 [ 277.768697][ T29] ? load_image+0x420/0x420 [ 277.773235][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 277.778207][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 277.784389][ T29] ? _printk+0xde/0x130 [ 277.788563][ T29] ? load_image+0x420/0x420 [ 277.793104][ T29] ? load_image+0x420/0x420 [ 277.797639][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 277.803745][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 277.809750][ T29] watchdog+0xf3d/0xf80 [ 277.813909][ T29] ? watchdog+0x1e1/0xf80 [ 277.818263][ T29] kthread+0x2fa/0x390 [ 277.822354][ T29] ? hungtask_pm_notify+0x90/0x90 [ 277.827402][ T29] ? kthread_blkcg+0xd0/0xd0 [ 277.831999][ T29] ret_from_fork+0x48/0x80 [ 277.836424][ T29] ? kthread_blkcg+0xd0/0xd0 [ 277.841024][ T29] ret_from_fork_asm+0x11/0x20 [ 277.845811][ T29] [ 277.849535][ T29] Sending NMI from CPU 1 to CPUs 0: [ 277.854807][ C0] NMI backtrace for cpu 0 [ 277.854818][ C0] CPU: 0 PID: 5931 Comm: kworker/0:2H Not tainted syzkaller #0 [ 277.854833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.854842][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 277.854868][ C0] RIP: 0010:check_preemption_disabled+0x4c/0x110 [ 277.854891][ C0] Code: 92 b5 7c 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 74 cc [ 277.854904][ C0] RSP: 0018:ffffc90004c8f870 EFLAGS: 00000086 [ 277.854916][ C0] RAX: 0000000000000000 RBX: ffff88802b8abc00 RCX: e0eed0735b63f100 [ 277.854927][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860 [ 277.854938][ C0] RBP: ffffc90004c8f930 R08: ffffffff911c7587 R09: 1ffffffff2238eb0 [ 277.854949][ C0] R10: dffffc0000000000 R11: fffffbfff2238eb1 R12: dffffc0000000000 [ 277.854960][ C0] R13: 0000000000000002 R14: ffffffff8a909486 R15: 1ffff92000991f14 [ 277.854971][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 277.854989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.855000][ C0] CR2: 000020000000b000 CR3: 0000000077dda000 CR4: 00000000003506f0 [ 277.855013][ C0] Call Trace: [ 277.855018][ C0] [ 277.855023][ C0] lockdep_hardirqs_on+0x98/0x150 [ 277.855043][ C0] _raw_spin_unlock_irqrestore+0x86/0x120 [ 277.855063][ C0] ? _raw_spin_unlock+0x40/0x40 [ 277.855079][ C0] ? mark_lock+0x94/0x320 [ 277.855101][ C0] queueptr+0x9e/0xb0 [ 277.855117][ C0] snd_seq_deliver_event+0x3d2/0x980 [ 277.855144][ C0] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 277.855163][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 277.855184][ C0] ? client_use_ptr+0xa9/0xab0 [ 277.855202][ C0] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 277.855224][ C0] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 277.855246][ C0] snd_vmidi_output_work+0x23d/0x3e0 [ 277.855270][ C0] ? snd_virmidi_output_drain+0x70/0x70 [ 277.855291][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.855309][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 277.855328][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 277.855346][ C0] process_scheduled_works+0xa5d/0x15d0 [ 277.855378][ C0] ? worker_attach_to_pool+0x380/0x380 [ 277.855399][ C0] ? assign_work+0x3d2/0x5d0 [ 277.855419][ C0] worker_thread+0xa55/0xfc0 [ 277.855438][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 277.855456][ C0] ? _raw_spin_unlock+0x40/0x40 [ 277.855472][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 277.855500][ C0] kthread+0x2fa/0x390 [ 277.855514][ C0] ? pr_cont_work+0x560/0x560 [ 277.855532][ C0] ? kthread_blkcg+0xd0/0xd0 [ 277.855546][ C0] ret_from_fork+0x48/0x80 [ 277.855564][ C0] ? kthread_blkcg+0xd0/0xd0 [ 277.855578][ C0] ret_from_fork_asm+0x11/0x20 [ 277.855605][ C0] [ 278.145171][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.165763][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 278.172641][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 278.179837][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.189900][ T29] Call Trace: [ 278.193173][ T29] [ 278.196106][ T29] dump_stack_lvl+0x18c/0x250 [ 278.200775][ T29] ? show_regs_print_info+0x20/0x20 [ 278.205959][ T29] ? load_image+0x420/0x420 [ 278.210547][ T29] panic+0x2dc/0x730 [ 278.214436][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 278.220077][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 278.224566][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 278.230097][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 278.236253][ T29] watchdog+0xf7c/0xf80 [ 278.240406][ T29] ? watchdog+0x1e1/0xf80 [ 278.244745][ T29] kthread+0x2fa/0x390 [ 278.248852][ T29] ? hungtask_pm_notify+0x90/0x90 [ 278.253875][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.258462][ T29] ret_from_fork+0x48/0x80 [ 278.262870][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.267447][ T29] ret_from_fork_asm+0x11/0x20 [ 278.272207][ T29] [ 278.275588][ T29] Kernel Offset: disabled [ 278.279905][ T29] Rebooting in 86400 seconds..