last executing test programs: 14m41.858175975s ago: executing program 2 (id=2605): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 14m41.665414065s ago: executing program 2 (id=2606): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x9e, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x2}) 14m38.782202392s ago: executing program 2 (id=2616): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 14m37.921597182s ago: executing program 2 (id=2629): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x0) 14m37.818551366s ago: executing program 2 (id=2632): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) 14m37.608769189s ago: executing program 2 (id=2637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) 14m22.470223048s ago: executing program 32 (id=2637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0x60000600) 12m3.439778893s ago: executing program 4 (id=3334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 12m3.34247129s ago: executing program 4 (id=3337): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970001400078008"], 0x60}}, 0x0) 12m3.135738298s ago: executing program 4 (id=3341): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a0000000500010006"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4020}, 0x0) 12m3.037391691s ago: executing program 4 (id=3342): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}], "0800040000000000"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 12m1.40234471s ago: executing program 4 (id=3350): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) 12m1.205557668s ago: executing program 4 (id=3351): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) unshare(0x62040200) 11m45.84596343s ago: executing program 33 (id=3351): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) unshare(0x62040200) 3m9.33437424s ago: executing program 3 (id=6216): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) mlockall(0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) 3m8.995844476s ago: executing program 3 (id=6220): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 3m4.883111014s ago: executing program 3 (id=6238): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket(0xa, 0x5, 0x0) sendto$inet6(r7, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3m3.793359235s ago: executing program 3 (id=6245): socket(0xa, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x10000048, 0x8000, 0x100, 0xfffffffffffffffc, 0x5c6, 0x10, 0xfae, 0xa}, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="4a6b98b226008d2d5c2ab37105f06d706f8e82c80e726c656176653a362d4e3a302f4e004a4cfce5153bbe7ddc877401cd8a15bf10c6a99f332f37088317d051c66784eafa024d4137c696d21fb4b2bde120b216552268edeeb0e509ad686988d1c2e8a73eb26c7ee84257920ae5c11ae70870459d1d37514f0bd5ef42b0bfd92d29bd91ece1e82ef8d080c90f07e6d1cdd9b5acf97c8041a82f7dca5bf0db531b1fb8ba1a7955d1c77c87a5229997b47cc7d6d7c30e6db06072ae42d0d221f7ad0832cbbb1bb749ccac04b052437cfc722829cbf49a6649cf67888cd433179f747db5595fe645db442a23422f63c594000000000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 2m59.646720282s ago: executing program 3 (id=6266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) mlockall(0x7) 2m56.359646427s ago: executing program 3 (id=6288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xca, 0xddc5, 0x0, 0x1, 0x6}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800064000000000050005000200000005000100060000000ac956f1b07c7eef21f999a9c6fdf12c68afd94ef187654f20034528eb9a163af7f065381fc84d22b0f4e59111c07e4ef2c6bbbc914312e6ca"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2m41.146132489s ago: executing program 34 (id=6288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xca, 0xddc5, 0x0, 0x1, 0x6}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800064000000000050005000200000005000100060000000ac956f1b07c7eef21f999a9c6fdf12c68afd94ef187654f20034528eb9a163af7f065381fc84d22b0f4e59111c07e4ef2c6bbbc914312e6ca"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 28.223239212s ago: executing program 0 (id=6950): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) 28.161421248s ago: executing program 1 (id=6952): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') 27.903158426s ago: executing program 1 (id=6954): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.796707813s ago: executing program 1 (id=6959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 24.952756578s ago: executing program 1 (id=6964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 24.952329684s ago: executing program 0 (id=6965): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 24.951624441s ago: executing program 5 (id=6966): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 24.836120413s ago: executing program 5 (id=6967): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x1, 0x8}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) 24.834853783s ago: executing program 6 (id=6968): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) 24.529615464s ago: executing program 7 (id=6970): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}}, 0x24004000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.524086813s ago: executing program 0 (id=6971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 24.439850052s ago: executing program 7 (id=6972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 24.372171404s ago: executing program 6 (id=6973): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)='9', 0x1}], 0x1}}], 0x1, 0x4) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 23.23889785s ago: executing program 7 (id=6974): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 22.304608796s ago: executing program 5 (id=6975): select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r3], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 22.191888495s ago: executing program 6 (id=6976): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) 22.131045283s ago: executing program 0 (id=6977): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21.991578463s ago: executing program 1 (id=6978): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 21.988788418s ago: executing program 0 (id=6979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000000c00)=""/59, 0x3b, 0x545) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r5}, 0x20) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 21.646094918s ago: executing program 5 (id=6980): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 21.644939984s ago: executing program 7 (id=6981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20.634940684s ago: executing program 0 (id=6982): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x5, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) dup(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) 19.468601588s ago: executing program 1 (id=6983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x109) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) epoll_create1(0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 19.444245339s ago: executing program 7 (id=6984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000180)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 19.269941427s ago: executing program 5 (id=6985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x9}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1000, 0x0, 0x6}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}, {}, {0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x9}, {}, {0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0xe98e}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x3}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x93}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x4, 0x9, 0x3}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x81, 0x2}, {0x0, 0x0, 0x39e}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x0, 0xc4fc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4040000, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 18.279621696s ago: executing program 6 (id=6986): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) 18.277787676s ago: executing program 7 (id=6987): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 18.14519153s ago: executing program 6 (id=6988): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x3, 0xfffffffa, 0x5, 0x40, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x5ec8, 0x6, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000003000000000000000000000000000002030000000000000000000004"], 0x0, 0x56}, 0x20) 16.918890611s ago: executing program 6 (id=6989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0xff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x1e) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 15.296862486s ago: executing program 5 (id=6990): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)}], 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6741c971712a6f1203fa1c9461a6b17e3f4a043430c86b5858053388087ff25f7ca49c8dde705bb9b2ff36c4fa81c59a9cd907b67cf7af24133cca75af67b50fd73b84e9d3ae866f64e2f2d30e9811c0c6cf91f741b0285e1b885e41a61cf9bef1c0e800451ef3e5c537021a4c8de36692944b55f9c089a85154bb652fb0028fcfddaba12edc047cfaa3069cc9f96609b69416a1d605ed48ef41f0e85c77aa94f690ff824f78fa46463d978b065498f7ea1b1349e3a268caf8d72f0232d41721db3444ab2d042d9edf6703c5dff8", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 5.521619548s ago: executing program 35 (id=6982): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x5, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) dup(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) 3.999860977s ago: executing program 36 (id=6983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x109) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) epoll_create1(0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3.012414511s ago: executing program 37 (id=6987): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20040040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 1.503509148s ago: executing program 38 (id=6989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0xff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x1e) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 0s ago: executing program 39 (id=6990): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)}], 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6741c971712a6f1203fa1c9461a6b17e3f4a043430c86b5858053388087ff25f7ca49c8dde705bb9b2ff36c4fa81c59a9cd907b67cf7af24133cca75af67b50fd73b84e9d3ae866f64e2f2d30e9811c0c6cf91f741b0285e1b885e41a61cf9bef1c0e800451ef3e5c537021a4c8de36692944b55f9c089a85154bb652fb0028fcfddaba12edc047cfaa3069cc9f96609b69416a1d605ed48ef41f0e85c77aa94f690ff824f78fa46463d978b065498f7ea1b1349e3a268caf8d72f0232d41721db3444ab2d042d9edf6703c5dff8", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) kernel console output (not intermixed with test programs): .069498][T18272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5137'. [ 991.483805][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.809928][T18301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5151'. [ 992.994465][ T990] net_ratelimit: 1 callbacks suppressed [ 992.994486][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.925235][T18323] 9pnet_fd: Insufficient options for proto=fd [ 994.024783][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.126225][T18328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5164'. [ 994.503941][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.746120][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.901882][T18339] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 994.901945][T18339] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 995.064618][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.255373][T18343] kernel read not supported for file /eth0 (pid: 18343 comm: syz.1.5170) [ 995.262223][ T38] kauditd_printk_skb: 26 callbacks suppressed [ 995.262243][ T38] audit: type=1800 audit(1763266048.975:47): pid=18343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5170" name="eth0" dev="mqueue" ino=72834 res=0 errno=0 [ 995.386655][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.406539][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.407639][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.420210][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.164079][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.348377][T18362] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5178'. [ 996.662016][T18366] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5177'. [ 998.454788][T18386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5187'. [ 998.584633][T12363] net_ratelimit: 2 callbacks suppressed [ 998.584654][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.634254][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.957388][T18410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5190'. [ 1000.538129][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1000.538202][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.603933][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.664225][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.793911][T18417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1000.793936][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1001.154249][ T4669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.156774][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.165015][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.573545][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5203'. [ 1001.714352][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.011090][T18437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1002.011155][T18437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1002.744183][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.444591][T18454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.630645][T18457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.644803][ T3121] net_ratelimit: 16 callbacks suppressed [ 1003.644820][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.773872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.784345][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.801590][T18454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.581402][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1004.974241][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.595032][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5221'. [ 1006.069308][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.665706][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.154077][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.539862][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1008.184966][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.375934][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.599152][T18529] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1009.954898][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.706961][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.829114][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.985658][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.842982][T18565] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5247'. [ 1013.403984][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.731767][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.261515][T18574] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1014.261574][T18574] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1014.744420][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.784458][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.493892][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.824484][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.933506][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.984869][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.543991][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.024287][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.345123][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.064841][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.114304][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.318264][T18626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1022.323249][T18626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1022.340115][T18626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1022.356282][T18626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1022.373925][T18626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1022.583918][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.144764][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.879653][ T4318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.244253][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.502883][ T4318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.504136][ T5121] Bluetooth: hci2: command tx timeout [ 1025.078443][ T4318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.304229][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.537013][ T4318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.623890][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.900094][T18625] chnl_net:caif_netlink_parms(): no params data found [ 1026.344157][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.583715][ T5121] Bluetooth: hci2: command tx timeout [ 1026.683820][ T32] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1026.838852][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.838877][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1026.838909][ T32] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1026.838928][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.850334][ T32] usb 1-1: config 0 descriptor?? [ 1026.944526][T18625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.944742][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.944944][T18625] bridge_slave_0: entered allmulticast mode [ 1026.951309][T18625] bridge_slave_0: entered promiscuous mode [ 1026.987680][T18625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.987894][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.988140][T18625] bridge_slave_1: entered allmulticast mode [ 1027.015241][T18625] bridge_slave_1: entered promiscuous mode [ 1027.063532][ T32] usb 1-1: USB disconnect, device number 16 [ 1027.384445][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.505968][ T32] kernel write not supported for file /dsp (pid: 32 comm: kworker/1:0) [ 1028.447508][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.663730][ T5121] Bluetooth: hci2: command tx timeout [ 1028.786761][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.521112][T18704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.748713][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.944179][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.694919][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1030.694943][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1030.743753][ T5121] Bluetooth: hci2: command tx timeout [ 1030.824095][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.828141][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5315'. [ 1031.864082][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.864412][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.164505][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.247974][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.291476][ T4318] bond0 (unregistering): Released all slaves [ 1032.319179][ T4318] bond1 (unregistering): Released all slaves [ 1032.542252][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.579388][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.585465][ T4318] tipc: Left network mode [ 1032.746014][T18727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.904360][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.592982][T18741] netlink: 'syz.5.5317': attribute type 11 has an invalid length. [ 1034.008233][T18625] team0: Port device team_slave_0 added [ 1034.013998][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.065895][T18625] team0: Port device team_slave_1 added [ 1034.469552][T18757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.492781][T18757] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1034.683310][T18759] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5325'. [ 1034.903941][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.087656][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.122370][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.122387][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.122411][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.176231][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.176248][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.176270][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.223342][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.654508][ T4318] hsr_slave_0: left promiscuous mode [ 1036.736030][ T4318] hsr_slave_1: left promiscuous mode [ 1036.736961][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.736985][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.816498][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.816524][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.845063][T18808] netlink: 'syz.0.5349': attribute type 1 has an invalid length. [ 1036.949056][T18813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5349'. [ 1037.389220][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.576394][ T4318] veth1_macvtap: left promiscuous mode [ 1037.576629][ T4318] veth0_macvtap: left promiscuous mode [ 1037.576804][ T4318] veth1_vlan: left promiscuous mode [ 1037.576976][ T4318] veth0_vlan: left promiscuous mode [ 1037.792185][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5353'. [ 1038.510403][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.523554][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.561948][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.146981][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.584049][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.543911][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.624336][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.673798][ T3121] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1041.867273][ T3121] usb 6-1: Using ep0 maxpacket: 32 [ 1041.907380][ T3121] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.907440][ T3121] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1041.907466][ T3121] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1041.907491][ T3121] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.907513][ T3121] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1041.910675][ T3121] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1041.910706][ T3121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.910725][ T3121] usb 6-1: Product: syz [ 1041.910738][ T3121] usb 6-1: Manufacturer: syz [ 1041.910751][ T3121] usb 6-1: SerialNumber: syz [ 1041.946999][ T3121] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1041.947097][ T3121] imon 6-1:155.0: unable to initialize intf0, err -90 [ 1041.947111][ T3121] imon:imon_probe: failed to initialize context! [ 1041.947122][ T3121] imon 6-1:155.0: unable to register, err -19 [ 1042.674201][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.714070][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.727729][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 1043.965120][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 1044.388047][ T3121] usb 6-1: USB disconnect, device number 11 [ 1044.584180][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.696207][T18878] virtio-fs: tag not found [ 1044.709497][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5374'. [ 1044.764118][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.794175][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.521016][T18808] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1046.824704][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.867178][T18882] netlink: 4288 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1046.992239][T18891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'. [ 1046.992265][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5379'. [ 1047.127452][T18625] hsr_slave_0: entered promiscuous mode [ 1047.128800][T18625] hsr_slave_1: entered promiscuous mode [ 1047.129718][T18625] debugfs: 'hsr0' already exists in 'hsr' [ 1047.129741][T18625] Cannot create hsr debugfs directory [ 1047.624026][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.883146][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.988087][T18910] netlink: 'syz.1.5388': attribute type 1 has an invalid length. [ 1048.171642][T18910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1048.667772][T18914] bond2: (slave gretap1): making interface the new active one [ 1048.682535][T18914] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1048.793957][T18923] virtio-fs: tag not found [ 1048.795025][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5387'. [ 1048.904631][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.978896][T18931] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1049.173852][T18934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5390'. [ 1049.787560][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1050.624910][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.624988][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.673871][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.777803][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.878473][T18963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5400'. [ 1052.379987][T18978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.380532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.823895][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.279878][T18985] netlink: 'syz.5.5405': attribute type 1 has an invalid length. [ 1053.385294][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5405'. [ 1053.442742][T18986] bond1: (slave gretap1): making interface the new active one [ 1053.443492][T18986] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1053.674754][T18625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1053.703941][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.757883][T18625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1053.863927][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.144050][T18625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1054.985325][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.100297][T18625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1055.216264][T19026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.216640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.024305][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.744348][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.763732][ T3121] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1056.771995][T18625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.913812][ T3121] usb 7-1: Using ep0 maxpacket: 16 [ 1056.916203][ T3121] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.916228][ T3121] usb 7-1: config 0 has no interfaces? [ 1056.920963][ T3121] usb 7-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1056.920991][ T3121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.921009][ T3121] usb 7-1: Product: syz [ 1056.921023][ T3121] usb 7-1: Manufacturer: syz [ 1056.921036][ T3121] usb 7-1: SerialNumber: syz [ 1056.996951][ T3121] usb 7-1: config 0 descriptor?? [ 1057.058549][T19051] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5420'. [ 1057.133143][T18625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.254904][ T990] usb 7-1: USB disconnect, device number 8 [ 1057.285002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.285116][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.415753][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.415900][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.709275][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1058.710074][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1058.874928][ T5885] net_ratelimit: 1 callbacks suppressed [ 1058.874946][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.074277][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1060.405177][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.473836][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.474030][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.703969][T19101] netlink: 'syz.0.5434': attribute type 1 has an invalid length. [ 1060.866947][T19101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5434'. [ 1061.050564][T19105] bond1: (slave gretap1): making interface the new active one [ 1061.051422][T19105] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1061.103430][T19109] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5437'. [ 1061.464238][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.470357][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.472612][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.479150][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.487242][T18625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.952024][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.952103][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.533351][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.544243][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.994353][T18625] veth0_vlan: entered promiscuous mode [ 1064.038688][T18625] veth1_vlan: entered promiscuous mode [ 1064.147610][T18625] veth0_macvtap: entered promiscuous mode [ 1064.177333][T18625] veth1_macvtap: entered promiscuous mode [ 1064.220494][T18625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.248707][T18625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.271708][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.271998][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.473711][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.482809][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.562006][T19161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5450'. [ 1064.599402][ T5885] net_ratelimit: 1 callbacks suppressed [ 1064.599423][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.983698][T14332] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1065.161000][T14332] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.161029][T14332] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1065.161085][T14332] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1065.161107][T14332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.176665][T14332] usb 7-1: config 0 descriptor?? [ 1065.197972][T14332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1065.198027][T14332] dvb-usb: bulk message failed: -22 (3/0) [ 1065.228657][T19181] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5458'. [ 1065.257899][T14332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1065.275797][T14332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.275866][T14332] usb 7-1: media controller created [ 1065.278492][T14332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.327255][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.327470][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.327718][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.327987][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.328016][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.336924][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.337108][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.396399][T14332] dvb-usb: bulk message failed: -22 (6/0) [ 1065.396484][T14332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1065.471098][T14332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14 [ 1065.512696][T14332] dvb-usb: schedule remote query interval to 150 msecs. [ 1065.512723][T14332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1065.583955][T14332] usb 7-1: USB disconnect, device number 9 [ 1065.614969][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.614989][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.637297][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.822361][T19192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.822663][T19192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.850679][T19191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.921887][T14332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1067.046904][T19215] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5466'. [ 1067.515894][T19227] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5472'. [ 1067.537559][T19222] netlink: 'syz.1.5469': attribute type 1 has an invalid length. [ 1068.204908][T19242] overlay: Unknown parameter '/' [ 1068.994822][T19259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1069.604679][ T9] net_ratelimit: 4 callbacks suppressed [ 1069.604698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.683894][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.996038][T19269] netlink: 'syz.3.5487': attribute type 1 has an invalid length. [ 1070.019623][T19269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1070.112433][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1070.128932][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1070.196380][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.197785][ T4669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.198584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.205403][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.673271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.704901][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.284008][ T5898] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1072.454151][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 1072.477135][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.477161][ T5898] usb 7-1: config 0 has no interfaces? [ 1072.512261][ T5898] usb 7-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1072.512291][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.512311][ T5898] usb 7-1: Product: syz [ 1072.512323][ T5898] usb 7-1: Manufacturer: syz [ 1072.512337][ T5898] usb 7-1: SerialNumber: syz [ 1072.558294][ T5898] usb 7-1: config 0 descriptor?? [ 1072.747756][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.770201][ T3121] usb 7-1: USB disconnect, device number 10 [ 1072.850101][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5501'. [ 1073.233953][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.304375][ T9] net_ratelimit: 1 callbacks suppressed [ 1075.304393][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.510688][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1076.425745][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.463080][T19334] overlayfs: failed to resolve './file1': -2 [ 1076.683864][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.464221][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.244122][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.477002][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.548245][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.588172][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.624937][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.873761][T12363] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1082.041620][T12363] usb 4-1: Using ep0 maxpacket: 16 [ 1082.878822][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.881491][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.883509][T12363] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1082.883534][T12363] usb 4-1: config 0 has no interface number 0 [ 1082.914353][T12363] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1082.914397][T12363] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1082.914421][T12363] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1082.943744][T12363] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1082.943792][T12363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.943811][T12363] usb 4-1: Product: syz [ 1082.943824][T12363] usb 4-1: Manufacturer: syz [ 1082.943838][T12363] usb 4-1: SerialNumber: syz [ 1082.986611][T12363] usb 4-1: config 0 descriptor?? [ 1082.991173][T19404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1082.991334][T19404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1083.198769][T12363] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1083.245755][T12363] usb 4-1: USB disconnect, device number 8 [ 1083.734110][T19437] kernel read not supported for file /eth0 (pid: 19437 comm: syz.6.5556) [ 1083.743421][T19437] 9pnet_fd: Insufficient options for proto=fd [ 1083.743761][ T38] audit: type=1800 audit(1763266137.456:48): pid=19437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5556" name="eth0" dev="mqueue" ino=76758 res=0 errno=0 [ 1084.008322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.164609][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.853424][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5566'. [ 1086.005196][T19467] Bluetooth: MGMT ver 1.23 [ 1086.005242][T19467] Bluetooth: hci0: invalid len left 7, exp >= 119 [ 1086.113662][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.158295][T19465] netlink: 'syz.1.5566': attribute type 1 has an invalid length. [ 1086.158325][T19465] netlink: 'syz.1.5566': attribute type 2 has an invalid length. [ 1086.193804][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.622413][T19477] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1086.622444][T19477] overlayfs: missing 'lowerdir' [ 1087.224151][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.333894][T19488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5578'. [ 1088.748225][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.413604][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.413839][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.995976][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.912674][T19525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5591'. [ 1090.914710][T19525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5591'. [ 1091.063894][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.080413][T19526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.080699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.394492][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.436863][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.464015][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.505405][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.883748][ T5624] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1095.153740][ T5624] usb 4-1: Using ep0 maxpacket: 16 [ 1095.156267][ T5624] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1095.156293][ T5624] usb 4-1: config 0 has no interface number 0 [ 1095.156347][ T5624] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1095.156372][ T5624] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1095.156396][ T5624] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1095.159483][ T5624] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1095.159511][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.159530][ T5624] usb 4-1: Product: syz [ 1095.159545][ T5624] usb 4-1: Manufacturer: syz [ 1095.159558][ T5624] usb 4-1: SerialNumber: syz [ 1095.256734][ T5624] usb 4-1: config 0 descriptor?? [ 1095.257796][T19578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1095.258086][T19578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1095.463933][ T3121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.464533][ T5624] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1095.473432][ T5624] usb 4-1: USB disconnect, device number 9 [ 1095.544433][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.677706][T19600] netlink: 'syz.6.5618': attribute type 1 has an invalid length. [ 1095.677729][T19600] netlink: 'syz.6.5618': attribute type 2 has an invalid length. [ 1096.584005][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.624275][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.423962][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.503838][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.664471][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.256404][T19646] kernel read not supported for file /eth0 (pid: 19646 comm: syz.1.5641) [ 1099.256665][ T38] audit: type=1800 audit(1763266152.976:49): pid=19646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5641" name="eth0" dev="mqueue" ino=79101 res=0 errno=0 [ 1099.299975][T18626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.307435][T18626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.308732][T18626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.310255][T18626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.319429][T18626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1099.713805][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.031273][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.383812][T18626] Bluetooth: hci0: command tx timeout [ 1101.459479][T19647] chnl_net:caif_netlink_parms(): no params data found [ 1101.543847][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.765683][T19674] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1101.812783][T19676] kernel read not supported for file /eth0 (pid: 19676 comm: syz.6.5651) [ 1101.813466][ T38] audit: type=1800 audit(1763266155.526:50): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5651" name="eth0" dev="mqueue" ino=76758 res=0 errno=0 [ 1102.104381][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.331820][T19647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.351562][T19647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.351816][T19647] bridge_slave_0: entered allmulticast mode [ 1102.384790][T19647] bridge_slave_0: entered promiscuous mode [ 1102.388171][T19647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.388327][T19647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.388524][T19647] bridge_slave_1: entered allmulticast mode [ 1102.391245][T19647] bridge_slave_1: entered promiscuous mode [ 1103.009601][T19647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.025864][T19647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.216169][T19708] kernel read not supported for file /eth0 (pid: 19708 comm: syz.6.5663) [ 1103.219301][ T38] audit: type=1800 audit(1763266156.936:51): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.5663" name="eth0" dev="mqueue" ino=76758 res=0 errno=0 [ 1103.219439][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.396729][T19708] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1103.463697][T18626] Bluetooth: hci0: command tx timeout [ 1103.641520][T19647] team0: Port device team_slave_0 added [ 1103.652440][T19647] team0: Port device team_slave_1 added [ 1104.063466][T19647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.063483][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.063509][T19647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.067433][T19647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.067448][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.067474][T19647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.264176][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.273794][T19184] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1104.515811][T19184] usb 7-1: Using ep0 maxpacket: 8 [ 1104.563321][T19739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1104.822131][T19184] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1104.915401][T19184] usb 7-1: config 13 has an invalid interface number: 54 but max is 0 [ 1104.915489][T19184] usb 7-1: config 13 has no interface number 0 [ 1104.916062][T19184] usb 7-1: config 13 interface 54 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1105.096058][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.401069][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.413377][T19184] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=93.8c [ 1105.413406][T19184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.413424][T19184] usb 7-1: Product: syz [ 1105.413438][T19184] usb 7-1: Manufacturer: syz [ 1105.413451][T19184] usb 7-1: SerialNumber: syz [ 1105.534229][T19647] hsr_slave_0: entered promiscuous mode [ 1105.536487][T19647] hsr_slave_1: entered promiscuous mode [ 1105.540765][T19647] debugfs: 'hsr0' already exists in 'hsr' [ 1105.540793][T19647] Cannot create hsr debugfs directory [ 1105.543962][T18626] Bluetooth: hci0: command tx timeout [ 1105.697210][T19184] usb 7-1: USB disconnect, device number 11 [ 1106.041758][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.041993][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.042233][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.042850][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.043004][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.493741][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.858081][T19761] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1106.858123][T19761] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1107.623835][T18626] Bluetooth: hci0: command tx timeout [ 1107.903179][T19647] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.933844][T12363] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1108.103716][T12363] usb 7-1: Using ep0 maxpacket: 16 [ 1108.137584][T12363] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.137611][T12363] usb 7-1: config 0 has no interfaces? [ 1108.169659][T12363] usb 7-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1108.169690][T12363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.169707][T12363] usb 7-1: Product: syz [ 1108.169720][T12363] usb 7-1: Manufacturer: syz [ 1108.169732][T12363] usb 7-1: SerialNumber: syz [ 1108.210477][T12363] usb 7-1: config 0 descriptor?? [ 1108.259095][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1108.418323][ T3121] usb 7-1: USB disconnect, device number 12 [ 1108.478375][T19647] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.894106][T19184] net_ratelimit: 3 callbacks suppressed [ 1108.894127][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.919385][T19647] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.944517][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.361224][T19647] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.673820][ T5819] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1110.863861][ T5819] usb 7-1: Using ep0 maxpacket: 16 [ 1110.866307][ T5819] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1110.866333][ T5819] usb 7-1: config 0 has no interface number 0 [ 1110.866383][ T5819] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1110.866407][ T5819] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1110.866430][ T5819] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1110.871713][ T5819] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1110.871740][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.871758][ T5819] usb 7-1: Product: syz [ 1110.871771][ T5819] usb 7-1: Manufacturer: syz [ 1110.871783][ T5819] usb 7-1: SerialNumber: syz [ 1110.901223][ T5819] usb 7-1: config 0 descriptor?? [ 1110.902320][T19811] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1110.902546][T19811] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1110.994327][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.106177][ T5819] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1111.164374][ T5819] usb 7-1: USB disconnect, device number 13 [ 1111.226661][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.374252][T19824] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5714'. [ 1111.605035][T19828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1111.780834][T19647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1111.875110][T19647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1112.083991][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.146470][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.163637][T19647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1113.235018][T19647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1113.970903][T19647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.998558][T19647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.025916][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.034077][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.067319][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.067521][T13253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.186041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.266786][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.341110][T19858] netlink: 'syz.6.5727': attribute type 1 has an invalid length. [ 1114.415815][T19861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5727'. [ 1114.452002][T19861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1114.495215][T19863] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1114.495242][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1114.944346][T19647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.224133][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.540243][T19889] kernel read not supported for file /eth0 (pid: 19889 comm: syz.3.5737) [ 1115.544864][ T38] audit: type=1800 audit(1763266169.256:52): pid=19889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5737" name="eth0" dev="mqueue" ino=81036 res=0 errno=0 [ 1115.547451][T19889] 9pnet_fd: Insufficient options for proto=fd [ 1115.704745][T19647] veth0_vlan: entered promiscuous mode [ 1115.762704][T19647] veth1_vlan: entered promiscuous mode [ 1115.942238][T19647] veth0_macvtap: entered promiscuous mode [ 1115.977188][T19647] veth1_macvtap: entered promiscuous mode [ 1116.047918][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1116.047940][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1116.080432][T19647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.125031][T19647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.179129][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.184802][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.196204][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.215237][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.265164][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.708621][T13253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.708644][T13253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.857422][T13253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.857442][T13253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.304221][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.304341][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.324268][T19909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1117.324497][T19909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1117.736342][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.344878][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.189743][T19946] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1119.190071][T19946] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1119.384996][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.622238][T19958] Bluetooth: MGMT ver 1.23 [ 1119.684422][T19960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1119.684453][T19960] overlayfs: missing 'lowerdir' [ 1120.403951][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.466303][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.607284][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.204422][T19990] overlay: Unknown parameter '/' [ 1122.924719][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.697169][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.697251][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.701655][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.956270][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.086078][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.154739][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.743902][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.938139][T20045] overlay: Unknown parameter '/' [ 1127.226739][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.228309][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.274251][T12363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.303857][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.803842][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.693680][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.798918][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.821423][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.938341][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.939069][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.939319][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.939518][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.939698][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.939881][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.940056][T20066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.405659][T19184] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1131.573753][T19184] usb 2-1: Using ep0 maxpacket: 16 [ 1131.576461][T19184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.576485][T19184] usb 2-1: config 0 has no interfaces? [ 1131.579506][T19184] usb 2-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1131.579533][T19184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.579552][T19184] usb 2-1: Product: syz [ 1131.579566][T19184] usb 2-1: Manufacturer: syz [ 1131.579579][T19184] usb 2-1: SerialNumber: syz [ 1131.601271][T19184] usb 2-1: config 0 descriptor?? [ 1131.815397][T19184] usb 2-1: USB disconnect, device number 21 [ 1135.863882][ T5819] net_ratelimit: 741 callbacks suppressed [ 1135.863903][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.867079][T14332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.483732][ T5819] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1136.633666][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 1136.646353][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1136.647746][ T5819] usb 6-1: config 13 has an invalid interface number: 54 but max is 0 [ 1136.647771][ T5819] usb 6-1: config 13 has no interface number 0 [ 1136.685617][ T5819] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=93.8c [ 1136.685654][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.685673][ T5819] usb 6-1: Product: syz [ 1136.685687][ T5819] usb 6-1: Manufacturer: syz [ 1136.685701][ T5819] usb 6-1: SerialNumber: syz [ 1136.836226][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.903861][T19184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.954064][ T5819] usb 6-1: USB disconnect, device number 12 [ 1139.951580][T20153] sp0: Synchronizing with TNC [ 1140.389408][ T3121] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1140.553753][ T3121] usb 7-1: Using ep0 maxpacket: 8 [ 1140.566594][ T3121] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1140.577415][ T3121] usb 7-1: config 13 has an invalid interface number: 54 but max is 0 [ 1140.577443][ T3121] usb 7-1: config 13 has no interface number 0 [ 1140.577490][ T3121] usb 7-1: config 13 interface 54 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1140.580852][ T3121] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=93.8c [ 1140.580880][ T3121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.580901][ T3121] usb 7-1: Product: syz [ 1140.580915][ T3121] usb 7-1: Manufacturer: syz [ 1140.580929][ T3121] usb 7-1: SerialNumber: syz [ 1140.898470][ T3121] usb 7-1: USB disconnect, device number 14 [ 1142.335285][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1142.343147][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1144.961001][ T5624] libceph: connect (1)[c::]:6789 error -101 [ 1144.961735][ T5624] libceph: mon0 (1)[c::]:6789 connect error [ 1144.990665][ T5624] libceph: connect (1)[c::]:6789 error -101 [ 1144.990888][ T5624] libceph: mon0 (1)[c::]:6789 connect error [ 1145.257460][ T5624] libceph: connect (1)[c::]:6789 error -101 [ 1145.257812][ T5624] libceph: mon0 (1)[c::]:6789 connect error [ 1145.496378][T20238] ceph: No mds server is up or the cluster is laggy [ 1145.714274][T20259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1145.714306][T20259] overlayfs: missing 'lowerdir' [ 1145.946861][ T5121] Bluetooth: hci2: command 0x0406 tx timeout [ 1145.998255][T20265] syzkaller1: entered promiscuous mode [ 1145.998280][T20265] syzkaller1: entered allmulticast mode [ 1146.081281][T20267] netlink: 'syz.3.5896': attribute type 4 has an invalid length. [ 1146.802420][T20273] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1147.375328][T20283] netlink: 'syz.3.5904': attribute type 1 has an invalid length. [ 1147.461044][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1148.475765][T20303] overlayfs: missing 'workdir' [ 1149.935785][T20314] netlink: 'syz.0.5916': attribute type 1 has an invalid length. [ 1149.948639][T20314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1152.896878][T20339] netlink: 'syz.5.5929': attribute type 1 has an invalid length. [ 1152.949720][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5929'. [ 1156.038880][T20375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5941'. [ 1157.826286][T20392] netlink: 'syz.0.5948': attribute type 4 has an invalid length. [ 1159.518220][T20417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1159.518285][T20417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1162.535663][T20440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1163.345140][T20448] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1164.873305][T20465] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1165.980772][T20469] netlink: 'syz.0.5980': attribute type 4 has an invalid length. [ 1167.653745][T14332] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1167.783746][T14332] usb 1-1: device descriptor read/64, error -71 [ 1168.023675][T14332] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1168.153717][T14332] usb 1-1: device descriptor read/64, error -71 [ 1168.204622][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5988'. [ 1168.265394][T14332] usb usb1-port1: attempt power cycle [ 1168.372862][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1168.380556][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1168.391522][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1168.408156][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1168.410806][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1168.683812][T14332] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1168.706622][T14332] usb 1-1: device descriptor read/8, error -71 [ 1170.023659][T14332] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1170.044436][T14332] usb 1-1: device descriptor read/8, error -71 [ 1170.160219][T14332] usb usb1-port1: unable to enumerate USB device [ 1170.503902][T18626] Bluetooth: hci5: command tx timeout [ 1170.685847][T20507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1172.584557][T18626] Bluetooth: hci5: command tx timeout [ 1173.032894][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.606683][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.634819][T20541] Driver unsupported XDP return value 0 on prog (id 246) dev N/A, expect packet loss! [ 1174.622766][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.668348][T18626] Bluetooth: hci5: command tx timeout [ 1175.235303][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.047420][T20492] chnl_net:caif_netlink_parms(): no params data found [ 1176.743705][T18626] Bluetooth: hci5: command tx timeout [ 1178.443145][ T68] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1179.694483][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.749850][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.804546][ T68] bond0 (unregistering): Released all slaves [ 1179.821669][ T68] bond1 (unregistering): Released all slaves [ 1179.839602][ T68] bond2 (unregistering): Released all slaves [ 1179.861712][ T68] bond3 (unregistering): Released all slaves [ 1182.004973][T20643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6050'. [ 1182.005220][T20643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6050'. [ 1182.018639][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.018781][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.019035][T20492] bridge_slave_0: entered allmulticast mode [ 1182.021888][T20492] bridge_slave_0: entered promiscuous mode [ 1182.163417][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.183043][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.183312][T20492] bridge_slave_1: entered allmulticast mode [ 1182.241494][T20492] bridge_slave_1: entered promiscuous mode [ 1183.236133][T20492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.352662][T20492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.617401][T20492] team0: Port device team_slave_0 added [ 1184.832866][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.832937][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.857126][T20665] overlay: Unknown parameter '/' [ 1184.939226][ T68] hsr_slave_0: left promiscuous mode [ 1185.064842][ T68] hsr_slave_1: left promiscuous mode [ 1185.065836][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.065860][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.097920][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.097947][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.317163][ T68] veth1_macvtap: left promiscuous mode [ 1185.317277][ T68] veth0_macvtap: left promiscuous mode [ 1185.319861][ T68] veth1_vlan: left promiscuous mode [ 1185.320047][ T68] veth0_vlan: left promiscuous mode [ 1186.708063][T20687] overlay: Unknown parameter '/' [ 1189.820491][T20708] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1189.820527][T20708] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1190.191656][T20716] overlay: Unknown parameter '/' [ 1190.497161][T20723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6082'. [ 1190.715015][T20726] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1190.715048][T20726] overlayfs: missing 'lowerdir' [ 1192.264401][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1192.546134][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1193.786285][T20752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6093'. [ 1195.294320][T20700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1195.294472][T20700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1195.297016][T20492] team0: Port device team_slave_1 added [ 1195.899040][T20766] team_slave_0: entered promiscuous mode [ 1195.906889][T20766] team_slave_1: entered promiscuous mode [ 1195.912375][T20766] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1196.124422][T20492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.124439][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.124466][T20492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.126938][T20492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.126951][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.126977][T20492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.014359][T20779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1197.033362][T20492] hsr_slave_0: entered promiscuous mode [ 1197.045034][T20492] hsr_slave_1: entered promiscuous mode [ 1197.046016][T20492] debugfs: 'hsr0' already exists in 'hsr' [ 1197.046041][T20492] Cannot create hsr debugfs directory [ 1198.077430][T20785] udevd[20785]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1198.089475][T20696] udevd[20696]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1200.235238][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6105'. [ 1200.239090][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6105'. [ 1200.710555][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6110'. [ 1204.502420][T20492] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1204.637790][T20492] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1204.681255][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6128'. [ 1205.896104][T20492] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1205.957676][T20890] tipc: Started in network mode [ 1205.957694][T20890] tipc: Node identity , cluster identity 4711 [ 1205.957708][T20890] tipc: Failed to set node id, please configure manually [ 1205.957754][T20890] tipc: Enabling of bearer rejected, failed to enable media [ 1206.054207][T20492] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1206.464875][T20492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.511786][T20492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.597022][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.597173][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.619922][T20907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1206.619981][T20907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1206.640201][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.642955][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.357368][T20492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.423856][ T5624] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1207.566010][T20492] veth0_vlan: entered promiscuous mode [ 1207.574705][ T5624] usb 7-1: Using ep0 maxpacket: 16 [ 1207.577371][ T5624] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.577395][ T5624] usb 7-1: config 0 has no interfaces? [ 1207.580425][ T5624] usb 7-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1207.580452][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.580471][ T5624] usb 7-1: Product: syz [ 1207.580484][ T5624] usb 7-1: Manufacturer: syz [ 1207.580497][ T5624] usb 7-1: SerialNumber: syz [ 1207.586624][ T5624] usb 7-1: config 0 descriptor?? [ 1207.617790][T20492] veth1_vlan: entered promiscuous mode [ 1207.710613][T20492] veth0_macvtap: entered promiscuous mode [ 1207.746841][T20492] veth1_macvtap: entered promiscuous mode [ 1207.798974][ T5819] usb 7-1: USB disconnect, device number 15 [ 1207.811738][T20492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.868684][T20492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.928991][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.935648][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.953395][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.964571][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.418028][ T8947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.418047][ T8947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.623806][ T1382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.623836][ T1382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.747117][T20951] overlay: Unknown parameter '/' [ 1216.577910][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1216.735238][T21015] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1216.775791][T21019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1218.467459][T21049] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6174'. [ 1218.467705][T21049] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6174'. [ 1218.505150][T21048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6189'. [ 1218.623748][T12363] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1218.640709][ T5624] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1218.783702][ T5624] usb 4-1: device descriptor read/64, error -71 [ 1219.043680][ T5624] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1219.113614][T12363] usb 7-1: Using ep0 maxpacket: 16 [ 1219.116880][T12363] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1219.116907][T12363] usb 7-1: config 0 has no interface number 0 [ 1219.116966][T12363] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1219.116995][T12363] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1219.117018][T12363] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1219.120087][T12363] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1219.120115][T12363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.120134][T12363] usb 7-1: Product: syz [ 1219.120147][T12363] usb 7-1: Manufacturer: syz [ 1219.120160][T12363] usb 7-1: SerialNumber: syz [ 1219.183672][ T5624] usb 4-1: device descriptor read/64, error -71 [ 1219.215712][T12363] usb 7-1: config 0 descriptor?? [ 1219.216776][T21045] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1219.217043][T21045] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1219.300507][ T5624] usb usb4-port1: attempt power cycle [ 1219.427494][T12363] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1219.472658][T12363] usb 7-1: USB disconnect, device number 16 [ 1219.675187][ T5624] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1219.694383][ T5624] usb 4-1: device descriptor read/8, error -71 [ 1220.036622][ T5624] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1220.243636][ T5624] usb 4-1: device not accepting address 13, error -71 [ 1220.244070][ T5624] usb usb4-port1: unable to enumerate USB device [ 1220.554156][T21076] syzkaller1: entered promiscuous mode [ 1220.554181][T21076] syzkaller1: entered allmulticast mode [ 1221.176756][T12363] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1221.323599][T12363] usb 6-1: Using ep0 maxpacket: 16 [ 1221.326398][T12363] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1221.326424][T12363] usb 6-1: config 0 has no interface number 0 [ 1221.326498][T12363] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1221.326521][T12363] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1221.326545][T12363] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1221.329803][T12363] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1221.329829][T12363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.329848][T12363] usb 6-1: Product: syz [ 1221.329868][T12363] usb 6-1: Manufacturer: syz [ 1221.329883][T12363] usb 6-1: SerialNumber: syz [ 1221.344914][T12363] usb 6-1: config 0 descriptor?? [ 1221.349372][T21088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1221.351100][T21088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1221.611083][T12363] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1221.641754][T12363] usb 6-1: USB disconnect, device number 13 [ 1222.744171][ T5121] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.655457][T21173] overlayfs: missing 'lowerdir' [ 1227.538422][T21180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1227.538487][T21180] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1229.614389][T21203] overlay: Unknown parameter '/' [ 1230.265074][T21216] overlayfs: missing 'lowerdir' [ 1231.092000][T21234] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6265'. [ 1231.655842][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6272'. [ 1231.682886][T21251] team0: entered promiscuous mode [ 1231.682910][T21251] team_slave_0: entered promiscuous mode [ 1231.683147][T21251] team_slave_1: entered promiscuous mode [ 1231.689432][T21251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1232.187803][T21260] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1232.187867][T21260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1232.277803][T21262] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6277'. [ 1233.260371][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1233.260400][T21274] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1235.891522][T21300] netlink: 'syz.5.6293': attribute type 1 has an invalid length. [ 1236.032631][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6293'. [ 1236.048614][T21300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1236.528147][T21310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1236.530140][T21310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1236.732990][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1237.113467][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6301'. [ 1238.176978][T21348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6312'. [ 1239.019518][T21365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1239.019539][T21365] overlayfs: missing 'lowerdir' [ 1239.695403][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1240.152882][T21383] tipc: Started in network mode [ 1240.152913][T21383] tipc: Node identity 82547f7418c9, cluster identity 4711 [ 1240.176246][T21383] tipc: Enabled bearer , priority 0 [ 1240.189693][T21383] syzkaller0: entered promiscuous mode [ 1240.189719][T21383] syzkaller0: entered allmulticast mode [ 1241.829475][T21392] tipc: Resetting bearer [ 1242.033944][T21382] tipc: Resetting bearer [ 1242.102439][T21405] overlay: Unknown parameter '/' [ 1242.231914][T21382] tipc: Disabling bearer [ 1242.377894][T14332] tipc: Node number set to 2594013044 [ 1242.618541][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6337'. [ 1245.774332][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1245.887881][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1246.012847][T21446] overlayfs: missing 'workdir' [ 1246.270846][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.270920][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.371559][T21454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6355'. [ 1250.736020][T21492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6366'. [ 1252.217814][T21499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6369'. [ 1252.218062][T21499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6369'. [ 1254.509296][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1254.519873][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1254.521523][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1254.522781][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1254.528792][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1255.946857][T21512] chnl_net:caif_netlink_parms(): no params data found [ 1256.583812][T18626] Bluetooth: hci4: command tx timeout [ 1257.832360][T21542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1257.832601][T21542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1258.452211][T21512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.452408][T21512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.452635][T21512] bridge_slave_0: entered allmulticast mode [ 1258.463625][T21512] bridge_slave_0: entered promiscuous mode [ 1258.551952][T21512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.552081][T21512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.552341][T21512] bridge_slave_1: entered allmulticast mode [ 1258.559799][T21512] bridge_slave_1: entered promiscuous mode [ 1258.664425][T18626] Bluetooth: hci4: command tx timeout [ 1258.721222][T21296] Set syz1 is full, maxelem 65536 reached [ 1259.006171][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6390'. [ 1259.645109][T21564] overlay: Unknown parameter '/' [ 1259.857737][T21512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.861956][T21512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.952728][T18626] Bluetooth: hci4: command tx timeout [ 1261.299657][T21585] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6396'. [ 1261.300885][T21585] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6396'. [ 1261.713762][T21578] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1261.714007][T21578] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1261.773927][T21512] team0: Port device team_slave_0 added [ 1262.077000][T21604] overlay: Unknown parameter '/' [ 1262.518945][T21512] team0: Port device team_slave_1 added [ 1263.112386][T18626] Bluetooth: hci4: command tx timeout [ 1264.601226][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.974831][T21512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.974847][T21512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.974875][T21512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.264647][T21657] netlink: 'syz.0.6416': attribute type 1 has an invalid length. [ 1265.321034][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.486849][T21512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.486869][T21512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.486897][T21512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.206956][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.987213][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.076866][T21512] hsr_slave_0: entered promiscuous mode [ 1267.079365][T21512] hsr_slave_1: entered promiscuous mode [ 1267.080430][T21512] debugfs: 'hsr0' already exists in 'hsr' [ 1267.080454][T21512] Cannot create hsr debugfs directory [ 1267.668416][T21695] tipc: Enabling of bearer rejected, failed to enable media [ 1268.051325][ T68] bridge_slave_1: left allmulticast mode [ 1268.051353][ T68] bridge_slave_1: left promiscuous mode [ 1268.051571][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.158575][ T68] bridge_slave_0: left allmulticast mode [ 1268.158604][ T68] bridge_slave_0: left promiscuous mode [ 1268.158885][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.312831][T21731] overlayfs: missing 'lowerdir' [ 1271.986529][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.048835][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.067458][ T68] bond0 (unregistering): Released all slaves [ 1273.518186][T21753] overlayfs: missing 'lowerdir' [ 1274.719617][T21768] tipc: Started in network mode [ 1274.719649][T21768] tipc: Node identity 4a174ab25c05, cluster identity 4711 [ 1274.719858][T21768] tipc: Enabled bearer , priority 0 [ 1274.734191][T21771] syzkaller0: entered promiscuous mode [ 1274.734219][T21771] syzkaller0: entered allmulticast mode [ 1274.764127][T21512] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1274.844803][T21763] tipc: Resetting bearer [ 1274.949237][T21512] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1275.056066][T21761] tipc: Resetting bearer [ 1275.241118][T21761] tipc: Disabling bearer [ 1275.394456][T21512] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1275.644386][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6460'. [ 1275.644413][T21789] nbd: must specify at least one socket [ 1275.645616][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6460'. [ 1275.645637][T21789] nbd: must specify at least one socket [ 1275.783875][ T68] hsr_slave_0: left promiscuous mode [ 1275.861296][ T68] hsr_slave_1: left promiscuous mode [ 1275.862282][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.862309][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.914694][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.914721][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.120828][ T68] team_slave_0: left promiscuous mode [ 1276.120928][ T68] team_slave_1: left promiscuous mode [ 1276.121092][ T68] veth1_macvtap: left promiscuous mode [ 1276.121192][ T68] veth0_macvtap: left promiscuous mode [ 1276.121468][ T68] veth1_vlan: left promiscuous mode [ 1276.122881][ T68] veth0_vlan: left promiscuous mode [ 1278.914410][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1279.195395][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1281.664383][T21512] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1282.148693][T21821] tipc: Enabled bearer , priority 0 [ 1282.154887][T21821] syzkaller0: entered promiscuous mode [ 1282.154913][T21821] syzkaller0: entered allmulticast mode [ 1282.179703][T21821] tipc: Resetting bearer [ 1282.255883][T21819] tipc: Resetting bearer [ 1282.448285][T21819] tipc: Disabling bearer [ 1282.918248][T21512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.998446][T21512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.029389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.029534][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.070697][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.070854][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.449049][T21851] tipc: Enabled bearer , priority 0 [ 1283.449988][T21851] syzkaller0: entered promiscuous mode [ 1283.450011][T21851] syzkaller0: entered allmulticast mode [ 1283.524033][T21850] tipc: Resetting bearer [ 1283.926360][T21850] tipc: Disabling bearer [ 1284.427314][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6491'. [ 1284.428665][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6491'. [ 1284.509966][T21512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.583782][ T5819] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1284.733623][ T5819] usb 7-1: Using ep0 maxpacket: 16 [ 1284.737093][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.737117][ T5819] usb 7-1: config 0 has no interfaces? [ 1284.741133][ T5819] usb 7-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1284.741159][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.741178][ T5819] usb 7-1: Product: syz [ 1284.741191][ T5819] usb 7-1: Manufacturer: syz [ 1284.741204][ T5819] usb 7-1: SerialNumber: syz [ 1284.761097][ T5819] usb 7-1: config 0 descriptor?? [ 1284.967991][ T3121] usb 7-1: USB disconnect, device number 17 [ 1285.129817][T21512] veth0_vlan: entered promiscuous mode [ 1285.159115][T21512] veth1_vlan: entered promiscuous mode [ 1285.215879][T21512] veth0_macvtap: entered promiscuous mode [ 1285.222202][T21512] veth1_macvtap: entered promiscuous mode [ 1285.255969][T21512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.269566][T21512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.285787][ T4318] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.286049][ T4318] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.286103][ T4318] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.286152][ T4318] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.562277][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.562298][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.632080][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.632101][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.663414][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1289.669674][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1289.670964][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1289.679329][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1289.681911][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1290.440587][T21908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1291.784255][ T5121] Bluetooth: hci2: command tx timeout [ 1292.136615][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.718828][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.048321][T21898] chnl_net:caif_netlink_parms(): no params data found [ 1293.332475][T21922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6509'. [ 1293.340604][T21922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6509'. [ 1293.863804][T18626] Bluetooth: hci2: command tx timeout [ 1294.278333][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.405281][T21932] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6513'. [ 1294.428405][T18626] Bluetooth: hci5: command 0x0405 tx timeout [ 1294.465035][T21932] team0: No ports can be present during mode change [ 1294.722623][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.943761][ T5121] Bluetooth: hci2: command tx timeout [ 1296.142998][T21898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.143189][T21898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.154220][T21898] bridge_slave_0: entered allmulticast mode [ 1296.166304][T21898] bridge_slave_0: entered promiscuous mode [ 1296.169836][T21898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.193717][T21898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.193996][T21898] bridge_slave_1: entered allmulticast mode [ 1296.213785][T21898] bridge_slave_1: entered promiscuous mode [ 1296.754054][ T5898] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1296.903725][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1297.101810][T21898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.143960][ T5898] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1297.178592][T21898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.273731][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1297.384602][ T5898] usb usb2-port1: attempt power cycle [ 1298.297435][ T5898] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1298.298470][ T5121] Bluetooth: hci2: command tx timeout [ 1298.328653][T21999] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1298.328898][T21999] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1298.566026][ T5898] usb 2-1: device descriptor read/8, error -71 [ 1299.725237][T21898] team0: Port device team_slave_0 added [ 1299.732509][T21898] team0: Port device team_slave_1 added [ 1299.748715][T22019] tipc: Started in network mode [ 1299.748744][T22019] tipc: Node identity 1ac8585033fb, cluster identity 4711 [ 1299.749372][T22019] tipc: Enabled bearer , priority 0 [ 1299.877564][T22019] syzkaller0: entered promiscuous mode [ 1299.877591][T22019] syzkaller0: entered allmulticast mode [ 1299.879195][ T68] bridge_slave_1: left allmulticast mode [ 1299.879221][ T68] bridge_slave_1: left promiscuous mode [ 1299.879470][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.976469][ T68] bridge_slave_0: left allmulticast mode [ 1299.976491][ T68] bridge_slave_0: left promiscuous mode [ 1299.976651][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.066760][ T68] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1302.334394][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.404553][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.426924][ T68] bond0 (unregistering): Released all slaves [ 1302.439989][ T68] bond1 (unregistering): Released all slaves [ 1303.027158][ T5885] tipc: Node number set to 691230800 [ 1303.028346][T21898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.028356][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.028370][T21898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.329539][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6556'. [ 1303.414191][T22018] tipc: Resetting bearer [ 1303.557713][T22018] tipc: Disabling bearer [ 1303.701877][T21898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.701894][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.701921][T21898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.769036][T22045] bridge_slave_1: left allmulticast mode [ 1303.769067][T22045] bridge_slave_1: left promiscuous mode [ 1303.769337][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.835945][T22045] bridge_slave_0: left allmulticast mode [ 1303.835968][T22045] bridge_slave_0: left promiscuous mode [ 1303.836137][T22045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.174100][T22042] syzkaller1: entered promiscuous mode [ 1304.174118][T22042] syzkaller1: entered allmulticast mode [ 1304.622654][T22054] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1305.271813][T21898] hsr_slave_0: entered promiscuous mode [ 1305.281490][T21898] hsr_slave_1: entered promiscuous mode [ 1305.282724][T21898] debugfs: 'hsr0' already exists in 'hsr' [ 1305.282750][T21898] Cannot create hsr debugfs directory [ 1305.375925][T22071] netlink: 'syz.6.6568': attribute type 1 has an invalid length. [ 1305.414623][ T68] hsr_slave_0: left promiscuous mode [ 1305.429424][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6568'. [ 1305.453741][ T68] hsr_slave_1: left promiscuous mode [ 1305.454786][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.454812][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.528081][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.528109][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.639651][ T68] veth1_macvtap: left promiscuous mode [ 1305.639788][ T68] veth0_macvtap: left promiscuous mode [ 1305.639952][ T68] veth1_vlan: left promiscuous mode [ 1305.640054][ T68] veth0_vlan: left promiscuous mode [ 1307.733333][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.736717][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.265681][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1308.524520][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1311.232149][T22074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1312.867323][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867503][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867527][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867547][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867567][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867586][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867605][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867624][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867643][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1312.867662][T22100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1313.058558][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6579'. [ 1313.186625][T22105] Bluetooth: MGMT ver 1.23 [ 1314.061820][T22119] netlink: 'syz.6.6586': attribute type 12 has an invalid length. [ 1314.228114][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6591'. [ 1315.439262][T22147] netlink: 'syz.5.6593': attribute type 10 has an invalid length. [ 1316.247911][ T990] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1316.393643][ T990] usb 7-1: Using ep0 maxpacket: 16 [ 1316.398133][ T990] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1316.398160][ T990] usb 7-1: config 0 has no interface number 0 [ 1316.398203][ T990] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1316.398225][ T990] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1316.398247][ T990] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1316.425113][ T990] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1316.425142][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.425160][ T990] usb 7-1: Product: syz [ 1316.425173][ T990] usb 7-1: Manufacturer: syz [ 1316.425186][ T990] usb 7-1: SerialNumber: syz [ 1316.446475][ T990] usb 7-1: config 0 descriptor?? [ 1316.451897][T22174] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1316.452633][T22174] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1316.682408][ T990] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1316.787811][ T990] usb 7-1: USB disconnect, device number 18 [ 1317.546361][T22215] netlink: 'syz.7.6604': attribute type 10 has an invalid length. [ 1318.044072][T22232] tipc: Enabling of bearer rejected, failed to enable media [ 1318.062813][T22236] netlink: 'syz.6.6609': attribute type 8 has an invalid length. [ 1318.063394][T22236] sch_fq: defrate 0 ignored. [ 1318.497908][T22230] syzkaller1: entered promiscuous mode [ 1318.497933][T22230] syzkaller1: entered allmulticast mode [ 1318.899699][T21898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1319.086877][T21898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1320.144365][T21898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1320.356360][T21898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1320.609942][T22282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6627'. [ 1320.693008][T21898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.770356][T21898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.810042][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.810266][ T1209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.838788][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.849725][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.946107][T21898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.228610][T22331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6643'. [ 1322.261033][T22334] netlink: 'syz.1.6644': attribute type 1 has an invalid length. [ 1322.385085][T22334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6644'. [ 1322.454872][T22334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1322.717218][T21898] veth0_vlan: entered promiscuous mode [ 1322.936957][T21898] veth1_vlan: entered promiscuous mode [ 1323.256814][T21898] veth0_macvtap: entered promiscuous mode [ 1323.283856][T21898] veth1_macvtap: entered promiscuous mode [ 1323.358399][T21898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.408805][T21898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.449660][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.449936][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.449974][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.450009][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.842970][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.842992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.088894][T22377] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6660'. [ 1324.156395][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.156414][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.692207][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6665'. [ 1324.692294][T22395] bridge_slave_1: left allmulticast mode [ 1324.692318][T22395] bridge_slave_1: left promiscuous mode [ 1324.692583][T22395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.046149][T22395] bridge_slave_0: left allmulticast mode [ 1325.046180][T22395] bridge_slave_0: left promiscuous mode [ 1325.046445][T22395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.837455][T22390] syzkaller1: entered promiscuous mode [ 1325.837485][T22390] syzkaller1: entered allmulticast mode [ 1325.950112][T18626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1325.953382][T18626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1325.970990][T18626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1325.981798][T18626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1325.998992][T18626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1326.435190][T22416] net_ratelimit: 3319 callbacks suppressed [ 1326.435211][T22416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1326.546349][T22419] netlink: 'syz.5.6672': attribute type 10 has an invalid length. [ 1327.464635][T22438] netlink: 'syz.5.6679': attribute type 1 has an invalid length. [ 1327.575068][T22443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6679'. [ 1327.751580][T22443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.023643][ T5121] Bluetooth: hci3: command tx timeout [ 1328.095787][T22410] chnl_net:caif_netlink_parms(): no params data found [ 1328.129031][T22454] netlink: 'syz.0.6684': attribute type 10 has an invalid length. [ 1330.880315][ T5121] Bluetooth: hci3: command tx timeout [ 1330.928895][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.326592][T22494] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6697'. [ 1331.690539][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.723658][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1331.812283][T22511] netlink: 'syz.5.6705': attribute type 10 has an invalid length. [ 1331.883908][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1331.914277][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1331.914303][ T9] usb 2-1: config 0 has no interface number 0 [ 1331.914343][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1331.914367][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1331.914391][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1331.918708][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1331.918738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.918756][ T9] usb 2-1: Product: syz [ 1331.918770][ T9] usb 2-1: Manufacturer: syz [ 1331.918784][ T9] usb 2-1: SerialNumber: syz [ 1331.926193][ T9] usb 2-1: config 0 descriptor?? [ 1331.927320][T22499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1331.927514][T22499] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1332.137052][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1332.165030][ T9] usb 2-1: USB disconnect, device number 26 [ 1332.302935][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.691775][T22527] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6711'. [ 1332.727182][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.774315][T22410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.774523][T22410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.774774][T22410] bridge_slave_0: entered allmulticast mode [ 1332.777977][T22410] bridge_slave_0: entered promiscuous mode [ 1332.824777][T22410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.824916][T22410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.825254][T22410] bridge_slave_1: entered allmulticast mode [ 1332.831378][T22410] bridge_slave_1: entered promiscuous mode [ 1332.904439][ T5121] Bluetooth: hci3: command tx timeout [ 1333.434694][T22410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.458789][T22410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.984574][ T5121] Bluetooth: hci3: command tx timeout [ 1335.361529][T22547] netlink: 'syz.5.6718': attribute type 10 has an invalid length. [ 1335.614674][T22551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.639139][T22551] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1335.656004][T22410] team0: Port device team_slave_0 added [ 1335.764641][T22410] team0: Port device team_slave_1 added [ 1336.823326][T22410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.823343][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.823372][T22410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.909798][T22410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.909815][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.909849][T22410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.109046][ T13] bridge_slave_1: left allmulticast mode [ 1338.109075][ T13] bridge_slave_1: left promiscuous mode [ 1338.111501][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.195214][ T13] bridge_slave_0: left allmulticast mode [ 1338.195244][ T13] bridge_slave_0: left promiscuous mode [ 1338.195517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.392962][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1341.504359][ T13] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1341.649713][T22666] netlink: 'syz.5.6745': attribute type 1 has an invalid length. [ 1341.753792][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1342.774912][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.844528][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.868173][ T13] bond0 (unregistering): Released all slaves [ 1342.878099][ T13] bond1 (unregistering): Released all slaves [ 1343.659194][ T13] bond2 (unregistering): Released all slaves [ 1344.477114][ T13] bond3 (unregistering): Released all slaves [ 1345.257171][ T13] bond4 (unregistering): Released all slaves [ 1345.516566][T22666] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1345.546363][T22410] hsr_slave_0: entered promiscuous mode [ 1345.547658][T22410] hsr_slave_1: entered promiscuous mode [ 1345.548544][T22410] debugfs: 'hsr0' already exists in 'hsr' [ 1345.548566][T22410] Cannot create hsr debugfs directory [ 1347.106452][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6754'. [ 1348.832595][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6766'. [ 1348.942538][T22725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1349.173015][T22736] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6770'. [ 1349.229781][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6771'. [ 1349.241234][T22740] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6770'. [ 1349.365153][T22739] team0: entered promiscuous mode [ 1349.365175][T22739] team_slave_0: entered promiscuous mode [ 1349.365492][T22739] team_slave_1: entered promiscuous mode [ 1349.383099][T22739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1349.395944][T22739] team0: left promiscuous mode [ 1349.395966][T22739] team_slave_0: left promiscuous mode [ 1349.396234][T22739] team_slave_1: left promiscuous mode [ 1350.725726][T22757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1350.878668][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1351.013845][ T13] hsr_slave_0: left promiscuous mode [ 1351.033926][ T13] hsr_slave_1: left promiscuous mode [ 1351.034729][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.034747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.074279][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.074306][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.181287][ T13] team0: left promiscuous mode [ 1351.181310][ T13] team_slave_0: left promiscuous mode [ 1351.181483][ T13] team_slave_1: left promiscuous mode [ 1351.181785][ T13] veth1_macvtap: left promiscuous mode [ 1351.181841][ T13] veth0_macvtap: left promiscuous mode [ 1351.181937][ T13] veth1_vlan: left promiscuous mode [ 1351.191510][ T13] veth0_vlan: left promiscuous mode [ 1354.634345][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1354.905140][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1357.725404][T22791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.093729][ T5898] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1358.243754][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 1358.279425][ T5898] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1358.279452][ T5898] usb 6-1: config 0 has no interface number 0 [ 1358.279502][ T5898] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1358.279516][ T5898] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1358.279528][ T5898] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1358.282017][ T5898] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1358.282044][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.282063][ T5898] usb 6-1: Product: syz [ 1358.282076][ T5898] usb 6-1: Manufacturer: syz [ 1358.282089][ T5898] usb 6-1: SerialNumber: syz [ 1358.365953][ T5898] usb 6-1: config 0 descriptor?? [ 1358.370611][T22804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1358.370854][T22804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1358.612995][ T5898] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1358.639323][ T5898] usb 6-1: USB disconnect, device number 14 [ 1359.010430][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'. [ 1360.772097][T22840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1361.020151][T22410] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1361.111335][T22410] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1361.216031][T22859] 9pnet_fd: Insufficient options for proto=fd [ 1361.218568][T22410] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1361.293367][T22410] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1361.440099][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6809'. [ 1361.456628][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6812'. [ 1361.890129][T22887] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1362.880290][T22410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.931531][T22410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.947887][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.948152][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.978714][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.978867][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.254267][T22410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.300511][T22920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6824'. [ 1365.512148][T22410] veth0_vlan: entered promiscuous mode [ 1365.520206][T22410] veth1_vlan: entered promiscuous mode [ 1365.554497][T22410] veth0_macvtap: entered promiscuous mode [ 1365.557958][T22410] veth1_macvtap: entered promiscuous mode [ 1365.572838][T22410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.578404][T22410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.597768][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.632520][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.640433][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.642240][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.782766][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.782787][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.812956][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.812976][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.949547][T22928] tipc: Started in network mode [ 1365.949578][T22928] tipc: Node identity 9a36e1793fc7, cluster identity 4711 [ 1365.949781][T22928] tipc: Enabled bearer , priority 0 [ 1365.950762][T22928] syzkaller0: entered promiscuous mode [ 1365.950783][T22928] syzkaller0: entered allmulticast mode [ 1365.971207][T22928] tipc: Resetting bearer [ 1366.003897][T22927] tipc: Resetting bearer [ 1366.134406][T22927] tipc: Disabling bearer [ 1367.345508][T22938] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1368.303658][ T5819] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1368.543586][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 1368.549395][ T5819] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1368.549423][ T5819] usb 6-1: config 0 has no interface number 0 [ 1368.552011][ T5819] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1368.552039][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.552059][ T5819] usb 6-1: Product: syz [ 1368.552071][ T5819] usb 6-1: Manufacturer: syz [ 1368.552085][ T5819] usb 6-1: SerialNumber: syz [ 1368.584272][ T5819] usb 6-1: config 0 descriptor?? [ 1368.590023][ T5819] smsc95xx v2.0.0 [ 1368.650504][T22977] 9pnet_fd: Insufficient options for proto=fd [ 1369.233744][ T5819] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1369.233776][ T5819] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1369.234450][ T5819] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1369.234775][ T5819] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1369.264368][ T5819] usb 6-1: USB disconnect, device number 15 [ 1369.415817][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.416007][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.590052][T23002] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1370.742196][T23036] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6863'. [ 1370.746621][T23036] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6863'. [ 1371.334179][T23032] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1371.773645][T19184] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1371.978169][T23051] tipc: Started in network mode [ 1371.978199][T23051] tipc: Node identity fafa541db4ed, cluster identity 4711 [ 1371.978415][T23051] tipc: Enabled bearer , priority 0 [ 1372.091243][T23057] syzkaller0: entered promiscuous mode [ 1372.091270][T23057] syzkaller0: entered allmulticast mode [ 1372.113980][T23048] tipc: Resetting bearer [ 1372.329425][T19184] usb 2-1: Using ep0 maxpacket: 16 [ 1372.333149][T19184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.333175][T19184] usb 2-1: config 0 has no interfaces? [ 1372.336858][T19184] usb 2-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 1372.336885][T19184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.336904][T19184] usb 2-1: Product: syz [ 1372.336918][T19184] usb 2-1: Manufacturer: syz [ 1372.336931][T19184] usb 2-1: SerialNumber: syz [ 1372.342864][T19184] usb 2-1: config 0 descriptor?? [ 1372.361508][T23047] tipc: Resetting bearer [ 1372.497517][T23047] tipc: Disabling bearer [ 1372.565158][T19184] usb 2-1: USB disconnect, device number 27 [ 1372.949653][T23069] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1373.056528][T23075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1373.480833][T23101] netlink: 'syz.5.6890': attribute type 1 has an invalid length. [ 1373.961067][T23113] tipc: Enabled bearer , priority 0 [ 1373.962141][T23113] syzkaller0: entered promiscuous mode [ 1373.962164][T23113] syzkaller0: entered allmulticast mode [ 1373.969255][T23113] tipc: Resetting bearer [ 1374.010453][T23112] tipc: Resetting bearer [ 1374.700455][T23135] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1374.753053][ T38] audit: type=1326 audit(1763266428.463:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23136 comm="syz.0.6902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ff807f6c9 code=0x0 [ 1374.769334][T23112] tipc: Disabling bearer [ 1374.853713][T17268] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1375.005851][T23141] fuse: Bad value for 'fd' [ 1375.137120][T17268] usb 6-1: device descriptor read/64, error -71 [ 1375.434308][T17268] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1375.973590][T17268] usb 6-1: device descriptor read/64, error -71 [ 1376.087768][T17268] usb usb6-port1: attempt power cycle [ 1376.107274][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1376.121795][T23148] team0: entered promiscuous mode [ 1376.121817][T23148] team_slave_0: entered promiscuous mode [ 1376.122034][T23148] team_slave_1: entered promiscuous mode [ 1376.135548][T23148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1376.137507][T23148] team0: left promiscuous mode [ 1376.137544][T23148] team_slave_0: left promiscuous mode [ 1376.137776][T23148] team_slave_1: left promiscuous mode [ 1376.298533][T23152] netlink: 'syz.7.6908': attribute type 1 has an invalid length. [ 1376.419233][T23153] bond1: (slave gretap1): making interface the new active one [ 1376.422335][T23153] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1376.443032][T17268] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1376.464489][T17268] usb 6-1: device descriptor read/8, error -71 [ 1376.666514][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1376.703628][T17268] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1376.724325][T17268] usb 6-1: device descriptor read/8, error -71 [ 1376.790459][T23166] fuseblk: Unknown parameter '0xffffffffffffffff' [ 1376.834162][T17268] usb usb6-port1: unable to enumerate USB device [ 1377.087094][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1378.218227][ T38] audit: type=1326 audit(1763266431.863:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23186 comm="syz.5.6923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa52bdf6c9 code=0x0 [ 1379.024533][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6924'. [ 1379.927256][ T38] audit: type=1326 audit(1763266433.633:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.5.6935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa52bdf6c9 code=0x0 [ 1382.136938][T18626] Bluetooth: hci4: command 0x0405 tx timeout [ 1382.793704][T19184] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1382.923726][T19184] usb 1-1: device descriptor read/64, error -71 [ 1383.158833][ T38] audit: type=1326 audit(1763266436.843:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23254 comm="syz.5.6951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa52bdf6c9 code=0x0 [ 1384.013586][T19184] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1384.143597][T19184] usb 1-1: device descriptor read/64, error -71 [ 1384.254010][T19184] usb usb1-port1: attempt power cycle [ 1386.081292][T23296] netlink: 'syz.0.6965': attribute type 1 has an invalid length. [ 1386.200978][T23296] bond1: (slave gretap1): making interface the new active one [ 1386.201816][T23296] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1387.223351][ T38] audit: type=1326 audit(1763266440.833:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23295 comm="syz.5.6967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa52bdf6c9 code=0x0 [ 1388.963578][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1389.093725][ T9] usb 7-1: device descriptor read/64, error -71 [ 1390.132999][T23332] netlink: 'syz.7.6981': attribute type 1 has an invalid length. [ 1390.624530][T23339] random: crng reseeded on system resumption [ 1392.416207][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1394.076269][T23365] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1405.719141][T18626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1405.733283][T18626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1405.737545][T18626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1405.739214][T18626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1405.739976][T18626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1407.193983][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1407.198028][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1407.199382][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1407.200559][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1407.201772][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1407.784701][ T5121] Bluetooth: hci1: command tx timeout [ 1408.143435][T23379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1408.167348][T23379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1408.169394][T23379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1408.171122][T23379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1408.171972][T23379] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1409.772709][T22412] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1409.793619][T22412] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1409.794980][T22412] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1409.796665][T22412] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1409.797490][T22412] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1409.863668][ T5121] Bluetooth: hci1: command tx timeout [ 1411.248270][T23387] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1411.268559][T23387] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1411.271101][T23387] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1411.272350][T23387] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1411.297384][T23387] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1411.943602][ T5121] Bluetooth: hci1: command tx timeout [ 1414.023627][ T5121] Bluetooth: hci1: command tx timeout [ 1453.143600][T23392] Bluetooth: hci3: command 0x0406 tx timeout [ 1465.871538][T23395] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1465.895579][T23395] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1465.898859][T23395] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1465.900121][T23395] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1465.901424][T23395] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1467.388687][T23399] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1467.409023][T23399] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1467.413159][T23399] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1467.435387][T23399] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1467.436973][T23399] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1468.393088][T23403] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1468.411334][T23403] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1468.412808][T23403] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1468.431870][T23403] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1468.432692][T23403] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1469.902900][T23407] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1469.921171][T23407] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1469.923202][T23407] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1469.947719][T23407] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1469.948556][T23407] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1471.902078][T23411] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1471.923003][T23411] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1471.935527][T23411] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1471.945314][T23411] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1471.946276][T23411] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1495.143471][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1495.143495][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16 [ 1495.143529][ C0] rcu: (detected by 0, t=10502 jiffies, g=119629, q=3944 ncpus=2) [ 1495.143543][ C0] task:ktimers/0 state:R running task stack:21640 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1495.143582][ C0] Call Trace: [ 1495.143591][ C0] [ 1495.143597][ C0] sched_show_task+0x49d/0x630 [ 1495.143623][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 1495.143632][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1495.143648][ C0] ? wq_watchdog_touch+0xf6/0x180 [ 1495.143661][ C0] print_other_cpu_stall+0xf78/0x1340 [ 1495.143681][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1495.143704][ C0] rcu_sched_clock_irq+0xa47/0x11b0 [ 1495.143714][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1495.143728][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1495.143743][ C0] update_process_times+0x235/0x2d0 [ 1495.143758][ C0] tick_nohz_handler+0x39a/0x520 [ 1495.143772][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1495.143782][ C0] __hrtimer_run_queues+0x506/0xd40 [ 1495.143806][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1495.143820][ C0] ? read_tsc+0x9/0x20 [ 1495.143839][ C0] hrtimer_interrupt+0x45d/0xa90 [ 1495.143868][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1495.143884][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1495.143900][ C0] [ 1495.143903][ C0] [ 1495.143908][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1495.143920][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1495.143936][ C0] Code: 74 05 e8 ab 6c 02 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 93 a6 cb f6 65 8b 05 0c 8e de 06 85 c0 74 40 48 c7 04 24 0e 36 [ 1495.143945][ C0] RSP: 0018:ffffc90000157900 EFLAGS: 00000206 [ 1495.143954][ C0] RAX: 7d42154ae4a5e400 RBX: 0000000000000a02 RCX: 7d42154ae4a5e400 [ 1495.143961][ C0] RDX: 0000000000000002 RSI: ffffffff8cd8e597 RDI: 0000000000000001 [ 1495.143968][ C0] RBP: ffffc90000157990 R08: ffffffff8ed63e77 R09: 1ffffffff1dac7ce [ 1495.143975][ C0] R10: dffffc0000000000 R11: fffffbfff1dac7cf R12: dffffc0000000000 [ 1495.143982][ C0] R13: dffffc0000000000 R14: ffff8880b8827dc0 R15: 1ffff9200002af20 [ 1495.144000][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1495.144017][ C0] ? timerqueue_del+0xae/0x100 [ 1495.144029][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1495.144041][ C0] __hrtimer_run_queues+0x42f/0xd40 [ 1495.144065][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1495.144078][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1495.144095][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1495.144108][ C0] handle_softirqs+0x22f/0x710 [ 1495.144125][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1495.144142][ C0] run_ktimerd+0xcf/0x190 [ 1495.144155][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1495.144167][ C0] ? schedule+0x91/0x360 [ 1495.144184][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1495.144195][ C0] smpboot_thread_fn+0x542/0xa60 [ 1495.144208][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1495.144225][ C0] kthread+0x711/0x8a0 [ 1495.144241][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1495.144253][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144265][ C0] ? rt_spin_unlock+0x150/0x200 [ 1495.144279][ C0] ? rt_spin_unlock+0x161/0x200 [ 1495.144289][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144302][ C0] ret_from_fork+0x4bc/0x870 [ 1495.144315][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.144330][ C0] ? __switch_to_asm+0x39/0x70 [ 1495.144340][ C0] ? __switch_to_asm+0x33/0x70 [ 1495.144348][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144362][ C0] ret_from_fork_asm+0x1a/0x30 [ 1495.144381][ C0] [ 1495.144386][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g119629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1495.144397][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=72006 [ 1495.144403][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g119629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1495.144413][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1495.144418][ C0] rcu: RCU grace-period kthread stack dump: [ 1495.144422][ C0] task:rcu_preempt state:I stack:27112 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1495.144454][ C0] Call Trace: [ 1495.144457][ C0] [ 1495.144463][ C0] __schedule+0x16f3/0x4c20 [ 1495.144493][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1495.144511][ C0] ? __lock_acquire+0xab9/0xd20 [ 1495.144524][ C0] ? __pfx___schedule+0x10/0x10 [ 1495.144545][ C0] ? schedule+0x91/0x360 [ 1495.144559][ C0] schedule+0x165/0x360 [ 1495.144577][ C0] schedule_timeout+0x12b/0x270 [ 1495.144590][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1495.144601][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1495.144615][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1495.144628][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1495.144644][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1495.144665][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1495.144678][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1495.144690][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1495.144706][ C0] ? finish_swait+0xcd/0x1f0 [ 1495.144719][ C0] rcu_gp_kthread+0x99/0x390 [ 1495.144733][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1495.144747][ C0] ? __kthread_parkme+0x7b/0x200 [ 1495.144759][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1495.144774][ C0] kthread+0x711/0x8a0 [ 1495.144789][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1495.144801][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144813][ C0] ? rt_spin_unlock+0x150/0x200 [ 1495.144826][ C0] ? rt_spin_unlock+0x161/0x200 [ 1495.144836][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144850][ C0] ret_from_fork+0x4bc/0x870 [ 1495.144862][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.144877][ C0] ? __switch_to_asm+0x39/0x70 [ 1495.144886][ C0] ? __switch_to_asm+0x33/0x70 [ 1495.144895][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.144908][ C0] ret_from_fork_asm+0x1a/0x30 [ 1495.144927][ C0] [ 1495.144930][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1495.144952][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1495.144977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.144989][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1495.145020][ C0] Code: 74 05 e8 ab 6c 02 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 93 a6 cb f6 65 8b 05 0c 8e de 06 85 c0 74 40 48 c7 04 24 0e 36 [ 1495.145036][ C0] RSP: 0018:ffffc90000157900 EFLAGS: 00000206 [ 1495.145043][ C0] RAX: 7d42154ae4a5e400 RBX: 0000000000000a02 RCX: 7d42154ae4a5e400 [ 1495.145050][ C0] RDX: 0000000000000002 RSI: ffffffff8cd8e597 RDI: 0000000000000001 [ 1495.145056][ C0] RBP: ffffc90000157990 R08: ffffffff8ed63e77 R09: 1ffffffff1dac7ce [ 1495.145063][ C0] R10: dffffc0000000000 R11: fffffbfff1dac7cf R12: dffffc0000000000 [ 1495.145070][ C0] R13: dffffc0000000000 R14: ffff8880b8827dc0 R15: 1ffff9200002af20 [ 1495.145077][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1495.145084][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1495.145091][ C0] CR2: 0000200000404030 CR3: 000000005520e000 CR4: 00000000003526f0 [ 1495.145100][ C0] Call Trace: [ 1495.145104][ C0] [ 1495.145108][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1495.145124][ C0] ? timerqueue_del+0xae/0x100 [ 1495.145134][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1495.145144][ C0] __hrtimer_run_queues+0x42f/0xd40 [ 1495.145167][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1495.145181][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1495.145197][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1495.145209][ C0] handle_softirqs+0x22f/0x710 [ 1495.145225][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1495.145242][ C0] run_ktimerd+0xcf/0x190 [ 1495.145254][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1495.145265][ C0] ? schedule+0x91/0x360 [ 1495.145281][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1495.145292][ C0] smpboot_thread_fn+0x542/0xa60 [ 1495.145305][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1495.145321][ C0] kthread+0x711/0x8a0 [ 1495.145336][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1495.145348][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.145360][ C0] ? rt_spin_unlock+0x150/0x200 [ 1495.145373][ C0] ? rt_spin_unlock+0x161/0x200 [ 1495.145383][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.145397][ C0] ret_from_fork+0x4bc/0x870 [ 1495.145409][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.145424][ C0] ? __switch_to_asm+0x39/0x70 [ 1495.145432][ C0] ? __switch_to_asm+0x33/0x70 [ 1495.145441][ C0] ? __pfx_kthread+0x10/0x10 [ 1495.145455][ C0] ret_from_fork_asm+0x1a/0x30 [ 1495.145473][ C0] [ 1526.012803][T23415] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1526.140561][T23415] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1526.263809][T23415] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1526.293716][T23415] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1526.313701][T23415] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1529.949977][T23417] Bluetooth: hci1: command 0x0406 tx timeout